# Flog Txt Version 1 # Analyzer Version: 3.0.1 # Analyzer Build Date: Apr 9 2019 11:17:16 # Log Creation Date: 12.04.2019 14:41:12.923 Process: id = "1" image_name = "sadcomputer.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sadcomputer.exe" page_root = "0x3e8c9000" os_pid = "0xa4c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SadComputer.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "64" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0xa50 [0043.433] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0047.535] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLNAME") returned 0xc143 [0047.535] RegisterClipboardFormatW (lpszFormat="WM_GETCONTROLTYPE") returned 0xc141 [0048.063] GetCurrentProcess () returned 0xffffffffffffffff [0048.064] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x14e6e8 | out: TokenHandle=0x14e6e8*=0x1cc) returned 1 [0048.402] GetCurrentProcess () returned 0xffffffffffffffff [0048.402] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x14e7b0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x14e7b0*=0x1d0) returned 1 [0048.515] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0049.144] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x7fef87b0000 [0049.220] GetModuleHandleW (lpModuleName="user32.dll") returned 0x76d30000 [0049.220] GetProcAddress (hModule=0x76d30000, lpProcName="DefWindowProcW") returned 0x76f7b0ac [0049.221] GetStockObject (i=5) returned 0x1900015 [0049.236] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0049.283] CoTaskMemAlloc (cb=0x5c) returned 0x2f3260 [0049.283] RegisterClassW (lpWndClass=0x14e380) returned 0xc13b [0049.284] CoTaskMemFree (pv=0x2f3260) [0049.284] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0049.285] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x2010000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffffffffffd, hMenu=0x0, hInstance=0xcc0000, lpParam=0x0) returned 0x401d0 [0049.346] SetWindowLongPtrW (hWnd=0x401d0, nIndex=-4, dwNewLong=0x76f7b0ac) returned 0x1aff131c [0049.365] GetWindowLongPtrW (hWnd=0x401d0, nIndex=-4) returned 0x76f7b0ac [0049.645] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x14d7c8 | out: phkResult=0x14d7c8*=0x1e4) returned 0x0 [0049.647] RegQueryValueExW (in: hKey=0x1e4, lpValueName="DbgJITDebugLaunchSetting", lpReserved=0x0, lpType=0x14d818, lpData=0x0, lpcbData=0x14d810*=0x0 | out: lpType=0x14d818*=0x0, lpData=0x0, lpcbData=0x14d810*=0x0) returned 0x2 [0049.647] RegQueryValueExW (in: hKey=0x1e4, lpValueName="DbgManagedDebugger", lpReserved=0x0, lpType=0x14d818, lpData=0x0, lpcbData=0x14d810*=0x0 | out: lpType=0x14d818*=0x0, lpData=0x0, lpcbData=0x14d810*=0x0) returned 0x2 [0049.648] RegCloseKey (hKey=0x1e4) returned 0x0 [0049.650] SetWindowLongPtrW (hWnd=0x401d0, nIndex=-4, dwNewLong=0x1aff136c) returned 0x76f7b0ac [0049.650] GetWindowLongPtrW (hWnd=0x401d0, nIndex=-4) returned 0x1aff136c [0049.650] GetWindowLongPtrW (hWnd=0x401d0, nIndex=-16) returned 0x6c10000 [0049.653] RegisterClipboardFormatW (lpszFormat="WinFormsMouseEnter") returned 0xc12f [0049.654] RegisterClipboardFormatW (lpszFormat="WinFormsUnSubclass") returned 0xc130 [0049.655] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401d0, Msg=0x81, wParam=0x0, lParam=0x14dd60) returned 0x1 [0049.655] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401d0, Msg=0x83, wParam=0x0, lParam=0x14de10) returned 0x0 [0049.655] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401d0, Msg=0x1, wParam=0x0, lParam=0x14dd60) returned 0x0 [0049.655] GetClientRect (in: hWnd=0x401d0, lpRect=0x14d820 | out: lpRect=0x14d820) returned 1 [0049.655] GetWindowRect (in: hWnd=0x401d0, lpRect=0x14d820 | out: lpRect=0x14d820) returned 1 [0049.658] GetParent (hWnd=0x401d0) returned 0x0 [0049.804] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", nBufferLength=0x105, lpBuffer=0x14e7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Windows.Forms\\v4.0_4.0.0.0__b77a5c561934e089\\System.Windows.Forms.dll", lpFilePart=0x0) returned 0x77 [0049.843] IsAppThemed () returned 0x1 [0049.844] CoTaskMemAlloc (cb=0xf0) returned 0xa37910 [0049.844] CreateActCtxA (pActCtx=0x14ed80) returned 0xa52648 [0049.922] CoTaskMemFree (pv=0xa37910) [0050.231] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef87b0000 [0050.232] AdjustWindowRectEx (in: lpRect=0x14e490, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x14e490) returned 1 [0050.408] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef87b0000 [0050.408] AdjustWindowRectEx (in: lpRect=0x14e2c0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e2c0) returned 1 [0050.428] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef87b0000 [0050.428] AdjustWindowRectEx (in: lpRect=0x14e2c0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e2c0) returned 1 [0050.443] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef87b0000 [0050.443] AdjustWindowRectEx (in: lpRect=0x14e2c0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e2c0) returned 1 [0050.458] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef87b0000 [0050.458] AdjustWindowRectEx (in: lpRect=0x14e2c0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e2c0) returned 1 [0050.476] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef87b0000 [0050.477] AdjustWindowRectEx (in: lpRect=0x14e2e0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e2e0) returned 1 [0050.493] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef87b0000 [0050.493] AdjustWindowRectEx (in: lpRect=0x14e1e8, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1e8) returned 1 [0050.554] GetUserObjectInformationA (in: hObj=0x44, nIndex=1, pvInfo=0x21227c8, nLength=0xc, lpnLengthNeeded=0x14de60 | out: pvInfo=0x21227c8, lpnLengthNeeded=0x14de60) returned 1 [0050.564] SetConsoleCtrlHandler (HandlerRoutine=0x1aff13bc, Add=1) returned 1 [0050.578] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0050.578] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0050.579] GetClassInfoW (in: hInstance=0xcc0000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWndClass=0x2122888 | out: lpWndClass=0x2122888) returned 0 [0050.580] CoTaskMemAlloc (cb=0x58) returned 0xa42cc0 [0050.580] RegisterClassW (lpWndClass=0x14dc70) returned 0xc13c [0050.580] CoTaskMemFree (pv=0xa42cc0) [0050.581] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.141b42a.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0xcc0000, lpParam=0x0) returned 0x40120 [0050.597] NtdllDefWindowProc_W (hWnd=0x40120, Msg=0x83, wParam=0x0, lParam=0x14d690) returned 0x0 [0050.597] NtdllDefWindowProc_W (hWnd=0x40120, Msg=0x1, wParam=0x0, lParam=0x14d580) returned 0x0 [0050.597] NtdllDefWindowProc_W (hWnd=0x40120, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0050.597] NtdllDefWindowProc_W (hWnd=0x40120, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0050.609] GetSysColor (nIndex=10) returned 0xb4b4b4 [0050.609] GetSysColor (nIndex=2) returned 0xd1b499 [0050.609] GetSysColor (nIndex=9) returned 0x0 [0050.609] GetSysColor (nIndex=12) returned 0xababab [0050.609] GetSysColor (nIndex=15) returned 0xf0f0f0 [0050.609] GetSysColor (nIndex=20) returned 0xffffff [0050.609] GetSysColor (nIndex=16) returned 0xa0a0a0 [0050.609] GetSysColor (nIndex=15) returned 0xf0f0f0 [0050.609] GetSysColor (nIndex=16) returned 0xa0a0a0 [0050.609] GetSysColor (nIndex=21) returned 0x696969 [0050.609] GetSysColor (nIndex=22) returned 0xe3e3e3 [0050.609] GetSysColor (nIndex=20) returned 0xffffff [0050.609] GetSysColor (nIndex=18) returned 0x0 [0050.609] GetSysColor (nIndex=1) returned 0x0 [0050.609] GetSysColor (nIndex=27) returned 0xead1b9 [0050.609] GetSysColor (nIndex=28) returned 0xf2e4d7 [0050.609] GetSysColor (nIndex=17) returned 0x6d6d6d [0050.609] GetSysColor (nIndex=13) returned 0xff9933 [0050.609] GetSysColor (nIndex=14) returned 0xffffff [0050.609] GetSysColor (nIndex=26) returned 0xcc6600 [0050.610] GetSysColor (nIndex=11) returned 0xfcf7f4 [0050.610] GetSysColor (nIndex=3) returned 0xdbcdbf [0050.610] GetSysColor (nIndex=19) returned 0x544e43 [0050.610] GetSysColor (nIndex=24) returned 0xe1ffff [0050.610] GetSysColor (nIndex=23) returned 0x0 [0050.610] GetSysColor (nIndex=4) returned 0xf0f0f0 [0050.610] GetSysColor (nIndex=30) returned 0xf0f0f0 [0050.610] GetSysColor (nIndex=29) returned 0xff9933 [0050.610] GetSysColor (nIndex=7) returned 0x0 [0050.610] GetSysColor (nIndex=0) returned 0xc8c8c8 [0050.610] GetSysColor (nIndex=5) returned 0xffffff [0050.610] GetSysColor (nIndex=6) returned 0x646464 [0050.610] GetSysColor (nIndex=8) returned 0x0 [0050.633] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef87b0000 [0050.633] AdjustWindowRectEx (in: lpRect=0x14e1e8, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1e8) returned 1 [0050.637] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef87b0000 [0050.637] AdjustWindowRectEx (in: lpRect=0x14e1e8, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1e8) returned 1 [0050.637] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef87b0000 [0050.637] AdjustWindowRectEx (in: lpRect=0x14e1e8, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1e8) returned 1 [0050.645] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef87b0000 [0050.646] AdjustWindowRectEx (in: lpRect=0x14e1e8, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1e8) returned 1 [0050.646] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef87b0000 [0050.646] AdjustWindowRectEx (in: lpRect=0x14e1e8, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1e8) returned 1 [0050.650] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef87b0000 [0050.650] AdjustWindowRectEx (in: lpRect=0x14e178, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e178) returned 1 [0050.650] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef87b0000 [0050.650] AdjustWindowRectEx (in: lpRect=0x14e178, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e178) returned 1 [0050.659] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef87b0000 [0050.659] AdjustWindowRectEx (in: lpRect=0x14e248, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x14e248) returned 1 [0050.659] GetSystemMetrics (nIndex=59) returned 1460 [0050.659] GetSystemMetrics (nIndex=60) returned 920 [0050.659] GetSystemMetrics (nIndex=34) returned 132 [0050.659] GetSystemMetrics (nIndex=35) returned 38 [0050.659] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef87b0000 [0050.659] AdjustWindowRectEx (in: lpRect=0x14e008, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x14e008) returned 1 [0050.661] GetCurrentThreadId () returned 0xa50 [0050.661] GetCurrentThreadId () returned 0xa50 [0050.665] GetSystemDefaultLCID () returned 0x409 [0050.665] GetStockObject (i=17) returned 0x18a0025 [0050.667] GetObjectW (in: h=0x18a0025, c=92, pv=0x14df30 | out: pv=0x14df30) returned 92 [0050.668] GetDC (hWnd=0x0) returned 0xb010256 [0050.698] GdiplusStartup (in: token=0x7fe938a7638, input=0x14c838, output=0x14c8e8 | out: token=0x7fe938a7638, output=0x14c8e8) returned 0x0 [0050.704] CoTaskMemAlloc (cb=0x5c) returned 0xa5e4b0 [0050.704] GdipCreateFontFromLogfontW (hdc=0xb010256, logfont=0xa5e4b0, font=0x14e070) returned 0x0 [0051.012] CoTaskMemFree (pv=0xa5e4b0) [0051.013] CoTaskMemAlloc (cb=0x5c) returned 0xa5e4b0 [0051.014] CoTaskMemFree (pv=0xa5e4b0) [0051.014] CoTaskMemAlloc (cb=0x5c) returned 0xa5e4b0 [0051.014] CoTaskMemFree (pv=0xa5e4b0) [0051.015] GdipGetFontUnit (font=0x1b4741a0, unit=0x14dfe0) returned 0x0 [0051.015] GdipGetFontSize (font=0x1b4741a0, size=0x14dfec) returned 0x0 [0051.015] GdipGetFontStyle (font=0x1b4741a0, style=0x14dfd8) returned 0x0 [0051.016] GdipGetFamily (font=0x1b4741a0, family=0x14dfd0) returned 0x0 [0051.019] GdipGetFontSize (font=0x1b4741a0, size=0x2123cf8) returned 0x0 [0051.019] ReleaseDC (hWnd=0x0, hDC=0xb010256) returned 1 [0051.021] GetDC (hWnd=0x0) returned 0x5010825 [0051.022] GdipCreateFromHDC (hdc=0x5010825, graphics=0x14dfe8) returned 0x0 [0051.025] GdipGetDpiY (graphics=0x1af3d3c0, dpi=0x2123ed0) returned 0x0 [0051.027] GdipGetFontHeight (font=0x1b4741a0, graphics=0x1af3d3c0, height=0x14dfe4) returned 0x0 [0051.028] GdipGetEmHeight (family=0x1b47c5e0, style=0, EmHeight=0x14dfe8) returned 0x0 [0051.029] GdipGetLineSpacing (family=0x1b47c5e0, style=0, LineSpacing=0x14dfe8) returned 0x0 [0051.029] GdipDeleteGraphics (graphics=0x1af3d3c0) returned 0x0 [0051.029] ReleaseDC (hWnd=0x0, hDC=0x5010825) returned 1 [0051.039] GdipCreateFont (fontFamily=0x1b47c5e0, emSize=0x7feeffbcd25, style=0, unit=0x3, font=0x2123e60) returned 0x0 [0051.039] GdipGetFontSize (font=0x1afa3a40, size=0x2123e68) returned 0x0 [0051.039] GdipDeleteFont (font=0x1b4741a0) returned 0x0 [0051.095] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef87b0000 [0051.100] AdjustWindowRectEx (in: lpRect=0x14df58, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14df58) returned 1 [0051.106] GdipGetFamilyName (in: family=0x1b47c5e0, name=0x14dca0, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0051.122] CreateCompatibleDC (hdc=0x0) returned 0x8010893 [0051.124] GetCurrentObject (hdc=0x8010893, type=0x1) returned 0x1b00017 [0051.124] GetCurrentObject (hdc=0x8010893, type=0x2) returned 0x1900010 [0051.124] GetCurrentObject (hdc=0x8010893, type=0x7) returned 0x185000f [0051.124] GetCurrentObject (hdc=0x8010893, type=0x6) returned 0x18a002e [0051.136] SaveDC (hdc=0x8010893) returned 1 [0051.138] GetDeviceCaps (hdc=0x8010893, index=90) returned 96 [0051.139] CoTaskMemAlloc (cb=0x5c) returned 0xa5e4b0 [0051.139] CreateFontIndirectW (lplf=0xa5e4b0) returned 0xb0a087e [0051.140] CoTaskMemFree (pv=0xa5e4b0) [0051.140] GetObjectW (in: h=0xb0a087e, c=92, pv=0x14dcb0 | out: pv=0x14dcb0) returned 92 [0051.154] GetCurrentObject (hdc=0x8010893, type=0x6) returned 0x18a002e [0051.154] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dab0 | out: pv=0x14dab0) returned 92 [0051.157] SelectObject (hdc=0x8010893, h=0xb0a087e) returned 0x18a002e [0051.158] GetMapMode (hdc=0x8010893) returned 1 [0051.159] GetTextMetricsW (in: hdc=0x8010893, lptm=0x14dcc0 | out: lptm=0x14dcc0) returned 1 [0051.160] DrawTextExW (in: hdc=0x8010893, lpchText="Label1", cchText=6, lprc=0x14dec8, format=0x2400, lpdtp=0x21248a0 | out: lpchText="Label1", lprc=0x14dec8) returned 13 [0051.212] GetCurrentThreadId () returned 0xa50 [0051.212] GetCurrentThreadId () returned 0xa50 [0051.213] GetCurrentThreadId () returned 0xa50 [0051.213] GetCurrentThreadId () returned 0xa50 [0051.213] GetCurrentThreadId () returned 0xa50 [0051.213] GetCurrentThreadId () returned 0xa50 [0051.213] GetCurrentThreadId () returned 0xa50 [0051.213] GetCurrentThreadId () returned 0xa50 [0051.228] CreateCompatibleDC (hdc=0x0) returned 0x32010876 [0051.230] GetDC (hWnd=0x0) returned 0x5010825 [0051.231] GdipCreateFromHDC (hdc=0x5010825, graphics=0x14de98) returned 0x0 [0051.231] CoTaskMemAlloc (cb=0x5c) returned 0xa5e4b0 [0051.231] GdipGetLogFontW (font=0x1afa3a40, graphics=0x1af3d3c0, logfontW=0xa5e4b0) returned 0x0 [0051.231] CoTaskMemFree (pv=0xa5e4b0) [0051.231] CoTaskMemAlloc (cb=0x5c) returned 0xa5e4b0 [0051.231] CoTaskMemFree (pv=0xa5e4b0) [0051.232] CoTaskMemAlloc (cb=0x5c) returned 0xa5e4b0 [0051.232] CoTaskMemFree (pv=0xa5e4b0) [0051.232] GdipDeleteGraphics (graphics=0x1af3d3c0) returned 0x0 [0051.232] ReleaseDC (hWnd=0x0, hDC=0x5010825) returned 1 [0051.232] CoTaskMemAlloc (cb=0x5c) returned 0xa5e4b0 [0051.232] CreateFontIndirectW (lplf=0xa5e4b0) returned 0x60a0875 [0051.232] CoTaskMemFree (pv=0xa5e4b0) [0051.233] SelectObject (hdc=0x32010876, h=0x60a0875) returned 0x18a002e [0051.234] GetTextMetricsW (in: hdc=0x32010876, lptm=0x14e118 | out: lptm=0x14e118) returned 1 [0051.234] GetTextExtentPoint32W (in: hdc=0x32010876, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x21255e8 | out: psizl=0x21255e8) returned 1 [0051.236] SelectObject (hdc=0x32010876, h=0x18a002e) returned 0x60a0875 [0051.237] DeleteDC (hdc=0x32010876) returned 1 [0051.237] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef87b0000 [0051.246] AdjustWindowRectEx (in: lpRect=0x14dd80, dwStyle=0x2ce0000, bMenu=0, dwExStyle=0x10001 | out: lpRect=0x14dd80) returned 1 [0051.246] AdjustWindowRectEx (in: lpRect=0x14e000, dwStyle=0x22ce0000, bMenu=0, dwExStyle=0x10001 | out: lpRect=0x14e000) returned 1 [0051.248] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef87b0000 [0051.248] AdjustWindowRectEx (in: lpRect=0x14dc70, dwStyle=0x2ce0000, bMenu=0, dwExStyle=0x10001 | out: lpRect=0x14dc70) returned 1 [0051.248] AdjustWindowRectEx (in: lpRect=0x14ddf0, dwStyle=0x22ce0000, bMenu=0, dwExStyle=0x10001 | out: lpRect=0x14ddf0) returned 1 [0051.248] GetSystemMetrics (nIndex=34) returned 132 [0051.248] GetSystemMetrics (nIndex=35) returned 38 [0051.248] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef87b0000 [0051.248] AdjustWindowRectEx (in: lpRect=0x14db60, dwStyle=0x2ce0000, bMenu=0, dwExStyle=0x10001 | out: lpRect=0x14db60) returned 1 [0051.248] AdjustWindowRectEx (in: lpRect=0x14dce8, dwStyle=0x22ce0000, bMenu=0, dwExStyle=0x10001 | out: lpRect=0x14dce8) returned 1 [0051.248] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef87b0000 [0051.248] AdjustWindowRectEx (in: lpRect=0x14e010, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e010) returned 1 [0051.249] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef87b0000 [0051.249] AdjustWindowRectEx (in: lpRect=0x14de60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14de60) returned 1 [0051.249] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef87b0000 [0051.249] AdjustWindowRectEx (in: lpRect=0x14dc08, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc08) returned 1 [0051.249] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef87b0000 [0051.249] AdjustWindowRectEx (in: lpRect=0x14e010, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e010) returned 1 [0051.249] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef87b0000 [0051.249] AdjustWindowRectEx (in: lpRect=0x14de60, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14de60) returned 1 [0051.250] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef87b0000 [0051.250] AdjustWindowRectEx (in: lpRect=0x14e010, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e010) returned 1 [0051.250] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef87b0000 [0051.250] AdjustWindowRectEx (in: lpRect=0x14de60, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14de60) returned 1 [0051.250] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef87b0000 [0051.250] AdjustWindowRectEx (in: lpRect=0x14e010, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e010) returned 1 [0051.250] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef87b0000 [0051.250] AdjustWindowRectEx (in: lpRect=0x14de60, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14de60) returned 1 [0051.250] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef87b0000 [0051.250] AdjustWindowRectEx (in: lpRect=0x14e010, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e010) returned 1 [0051.251] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fef87b0000 [0051.251] AdjustWindowRectEx (in: lpRect=0x14de60, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14de60) returned 1 [0051.254] GetCurrentActCtx (in: lphActCtx=0x14ee60 | out: lphActCtx=0x14ee60*=0x0) returned 1 [0051.254] ActivateActCtx (in: hActCtx=0xa52648, lpCookie=0x14eea0 | out: hActCtx=0xa52648, lpCookie=0x14eea0) returned 1 [0051.255] GetCurrentActCtx (in: lphActCtx=0x14eaf0 | out: lphActCtx=0x14eaf0*=0xa52648) returned 1 [0051.256] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x0 [0052.427] LoadLibraryW (lpLibFileName="comctl32.dll") returned 0x7fefb9a0000 [0052.435] AdjustWindowRectEx (in: lpRect=0x14ea10, dwStyle=0x2ce0000, bMenu=0, dwExStyle=0x10001 | out: lpRect=0x14ea10) returned 1 [0052.435] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0052.435] CreateWindowExW (dwExStyle=0x10001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName="Sad Computer", dwStyle=0x22ce0000, X=-2147483648, Y=-2147483648, nWidth=417, nHeight=254, hWndParent=0x0, hMenu=0x0, hInstance=0xcc0000, lpParam=0x0) returned 0x301d2 [0052.436] SetWindowLongPtrW (hWnd=0x301d2, nIndex=-4, dwNewLong=0x76f7b0ac) returned 0x1aff131c [0052.436] GetWindowLongPtrW (hWnd=0x301d2, nIndex=-4) returned 0x76f7b0ac [0052.436] SetWindowLongPtrW (hWnd=0x301d2, nIndex=-4, dwNewLong=0x1aff145c) returned 0x76f7b0ac [0052.436] GetWindowLongPtrW (hWnd=0x301d2, nIndex=-4) returned 0x1aff145c [0052.436] GetWindowLongPtrW (hWnd=0x301d2, nIndex=-16) returned 0x26ce0000 [0052.436] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x81, wParam=0x0, lParam=0x14e1b0) returned 0x1 [0052.437] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x83, wParam=0x0, lParam=0x14e260) returned 0x0 [0052.667] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x1, wParam=0x0, lParam=0x14e180) returned 0x0 [0052.668] GetClientRect (in: hWnd=0x301d2, lpRect=0x14dc00 | out: lpRect=0x14dc00) returned 1 [0052.668] GetWindowRect (in: hWnd=0x301d2, lpRect=0x14dc00 | out: lpRect=0x14dc00) returned 1 [0052.668] SetWindowTextW (hWnd=0x301d2, lpString="Sad Computer") returned 1 [0052.668] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0xc, wParam=0x0, lParam=0x2121054) returned 0x1 [0052.670] GetStartupInfoW (in: lpStartupInfo=0x2125d40 | out: lpStartupInfo=0x2125d40*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SadComputer.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0052.670] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x46, wParam=0x0, lParam=0x14e240) returned 0x0 [0052.670] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x83, wParam=0x1, lParam=0x14e210) returned 0x0 [0052.671] GetWindowPlacement (in: hWnd=0x301d2, lpwndpl=0x14de18 | out: lpwndpl=0x14de18) returned 1 [0052.671] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x47, wParam=0x0, lParam=0x14e240) returned 0x0 [0052.671] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x3, wParam=0x0, lParam=0x83008300) returned 0x0 [0052.671] GetClientRect (in: hWnd=0x301d2, lpRect=0x14d390 | out: lpRect=0x14d390) returned 1 [0052.671] GetWindowRect (in: hWnd=0x301d2, lpRect=0x14d390 | out: lpRect=0x14d390) returned 1 [0052.671] GetWindowTextLengthW (hWnd=0x301d2) returned 12 [0052.671] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0052.671] GetSystemMetrics (nIndex=42) returned 0 [0052.671] GetWindowTextW (in: hWnd=0x301d2, lpString=0x14cfc0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0052.671] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0xd, wParam=0xd, lParam=0x14cfc0) returned 0xc [0052.672] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x5, wParam=0x1, lParam=0x0) returned 0x0 [0052.672] GetClientRect (in: hWnd=0x301d2, lpRect=0x14dcb0 | out: lpRect=0x14dcb0) returned 1 [0052.672] GetWindowRect (in: hWnd=0x301d2, lpRect=0x14dcb0 | out: lpRect=0x14dcb0) returned 1 [0052.676] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0052.676] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0052.676] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0052.677] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x83, wParam=0x1, lParam=0x14dba0) returned 0x0 [0052.677] GetParent (hWnd=0x301d2) returned 0x0 [0052.678] GetStockObject (i=5) returned 0x1900015 [0052.679] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0052.679] CoTaskMemAlloc (cb=0x5c) returned 0xa5e520 [0052.679] RegisterClassW (lpWndClass=0x14e7e0) returned 0xc13e [0052.679] CoTaskMemFree (pv=0xa5e520) [0052.679] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0052.679] CreateWindowExW (dwExStyle=0x80, lpClassName="WindowsForms10.Window.0.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0xcc0000, lpParam=0x0) returned 0x301a2 [0052.679] SetWindowLongPtrW (hWnd=0x301a2, nIndex=-4, dwNewLong=0x76f7b0ac) returned 0x1aff14ac [0052.680] GetWindowLongPtrW (hWnd=0x301a2, nIndex=-4) returned 0x76f7b0ac [0052.680] SetWindowLongPtrW (hWnd=0x301a2, nIndex=-4, dwNewLong=0x1aff14fc) returned 0x76f7b0ac [0052.680] GetWindowLongPtrW (hWnd=0x301a2, nIndex=-4) returned 0x1aff14fc [0052.683] GetWindowLongPtrW (hWnd=0x301a2, nIndex=-16) returned 0x4c00000 [0052.696] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301a2, Msg=0x24, wParam=0x0, lParam=0x14e250) returned 0x0 [0052.696] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301a2, Msg=0x81, wParam=0x0, lParam=0x14e1c0) returned 0x1 [0052.697] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301a2, Msg=0x83, wParam=0x0, lParam=0x14e270) returned 0x0 [0052.697] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301a2, Msg=0x1, wParam=0x0, lParam=0x14e1c0) returned 0x0 [0052.697] SetWindowLongPtrW (hWnd=0x301d2, nIndex=-8, dwNewLong=0x301a2) returned 0x0 [0052.698] SendMessageW (hWnd=0x301d2, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0052.698] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0052.698] SendMessageW (hWnd=0x301d2, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0052.698] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0052.698] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0052.698] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0052.698] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0052.700] GetSystemMenu (hWnd=0x301d2, bRevert=0) returned 0x210171 [0052.702] GetWindowPlacement (in: hWnd=0x301d2, lpwndpl=0x14eaf8 | out: lpwndpl=0x14eaf8) returned 1 [0052.702] EnableMenuItem (hMenu=0x210171, uIDEnableItem=0xf020, uEnable=0x1) returned 0 [0052.702] EnableMenuItem (hMenu=0x210171, uIDEnableItem=0xf030, uEnable=0x1) returned 0 [0052.702] EnableMenuItem (hMenu=0x210171, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0052.703] EnableMenuItem (hMenu=0x210171, uIDEnableItem=0xf120, uEnable=0x0) returned 0 [0052.703] EnableMenuItem (hMenu=0x210171, uIDEnableItem=0xf000, uEnable=0x1) returned 0 [0052.703] SetWindowLongPtrW (hWnd=0x301d2, nIndex=-8, dwNewLong=0x301a2) returned 0x301a2 [0052.716] GetSystemMetrics (nIndex=11) returned 32 [0052.716] GetSystemMetrics (nIndex=12) returned 32 [0052.716] GetDC (hWnd=0x0) returned 0xb010256 [0052.716] GetDeviceCaps (hdc=0xb010256, index=12) returned 32 [0052.716] GetDeviceCaps (hdc=0xb010256, index=14) returned 1 [0052.716] ReleaseDC (hWnd=0x0, hDC=0xb010256) returned 1 [0052.717] CreateIconFromResourceEx (presbits=0x2128ef0, dwResSize=0x10a8, fIcon=1, dwVer=0x30000, cxDesired=0, cyDesired=0, Flags=0x0) returned 0x90097 [0052.719] SendMessageW (hWnd=0x301a2, Msg=0x80, wParam=0x1, lParam=0x90097) returned 0x0 [0052.719] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301a2, Msg=0x80, wParam=0x1, lParam=0x90097) returned 0x0 [0052.719] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301a2, Msg=0xd, wParam=0x104, lParam=0x1a6948a0) returned 0x0 [0052.719] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301a2, Msg=0xd, wParam=0x104, lParam=0x1a6948a0) returned 0x0 [0052.720] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0052.720] GetWindowLongPtrW (hWnd=0x301d2, nIndex=-16) returned 0x26ce0000 [0052.720] GetWindowTextLengthW (hWnd=0x301d2) returned 12 [0052.720] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0052.720] GetSystemMetrics (nIndex=42) returned 0 [0052.720] GetWindowTextW (in: hWnd=0x301d2, lpString=0x14e8f0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0052.720] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0xd, wParam=0xd, lParam=0x14e8f0) returned 0xc [0052.720] GetWindowTextLengthW (hWnd=0x301d2) returned 12 [0052.720] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0052.720] GetSystemMetrics (nIndex=42) returned 0 [0052.720] GetWindowTextW (in: hWnd=0x301d2, lpString=0x14e8f0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0052.720] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0xd, wParam=0xd, lParam=0x14e8f0) returned 0xc [0052.721] AdjustWindowRectEx (in: lpRect=0x14e9e0, dwStyle=0x2ce0000, bMenu=0, dwExStyle=0x10001 | out: lpRect=0x14e9e0) returned 1 [0052.721] GetWindowLongPtrW (hWnd=0x301d2, nIndex=-16) returned 0x26ce0000 [0052.721] GetWindowLongPtrW (hWnd=0x301d2, nIndex=-20) returned 0x10101 [0052.721] SetWindowLongPtrW (hWnd=0x301d2, nIndex=-16, dwNewLong=0x22ce0000) returned 0x26ce0000 [0052.721] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x14e9d0) returned 0x0 [0052.721] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x14e9d0) returned 0x0 [0052.721] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0052.721] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0052.721] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0052.721] SetWindowLongPtrW (hWnd=0x301d2, nIndex=-20, dwNewLong=0x10001) returned 0x10101 [0052.722] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x14e9d0) returned 0x0 [0052.722] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x14e9d0) returned 0x0 [0052.722] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0052.722] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0052.722] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0052.722] SetWindowPos (hWnd=0x301d2, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0052.722] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x46, wParam=0x0, lParam=0x14ea20) returned 0x0 [0052.722] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x83, wParam=0x1, lParam=0x14e9f0) returned 0x0 [0052.723] GetWindowPlacement (in: hWnd=0x301d2, lpwndpl=0x14e5f8 | out: lpwndpl=0x14e5f8) returned 1 [0052.723] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x47, wParam=0x0, lParam=0x14ea20) returned 0x0 [0052.723] GetClientRect (in: hWnd=0x301d2, lpRect=0x14e490 | out: lpRect=0x14e490) returned 1 [0052.723] GetWindowRect (in: hWnd=0x301d2, lpRect=0x14e490 | out: lpRect=0x14e490) returned 1 [0052.723] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0052.723] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0052.723] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0052.724] RedrawWindow (hWnd=0x301d2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0052.724] GetSystemMenu (hWnd=0x301d2, bRevert=0) returned 0x210171 [0052.724] GetWindowPlacement (in: hWnd=0x301d2, lpwndpl=0x14ea98 | out: lpwndpl=0x14ea98) returned 1 [0052.725] EnableMenuItem (hMenu=0x210171, uIDEnableItem=0xf020, uEnable=0x1) returned 1 [0052.725] EnableMenuItem (hMenu=0x210171, uIDEnableItem=0xf030, uEnable=0x1) returned 1 [0052.725] EnableMenuItem (hMenu=0x210171, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0052.725] EnableMenuItem (hMenu=0x210171, uIDEnableItem=0xf120, uEnable=0x0) returned 0 [0052.725] EnableMenuItem (hMenu=0x210171, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0052.725] ShowWindow (hWnd=0x301d2, nCmdShow=2) returned 0 [0052.725] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x46, wParam=0x0, lParam=0x14ec30) returned 0x0 [0052.726] GetWindowPlacement (in: hWnd=0x301d2, lpwndpl=0x14e808 | out: lpwndpl=0x14e808) returned 1 [0052.726] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x47, wParam=0x0, lParam=0x14ec30) returned 0x0 [0052.726] GetClientRect (in: hWnd=0x301d2, lpRect=0x14e6a0 | out: lpRect=0x14e6a0) returned 1 [0052.726] GetWindowRect (in: hWnd=0x301d2, lpRect=0x14e6a0 | out: lpRect=0x14e6a0) returned 1 [0052.726] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0052.726] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0052.726] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0052.726] GetWindowTextLengthW (hWnd=0x301d2) returned 12 [0052.726] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0052.726] GetSystemMetrics (nIndex=42) returned 0 [0052.726] GetWindowTextW (in: hWnd=0x301d2, lpString=0x14ea00, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0052.726] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0xd, wParam=0xd, lParam=0x14ea00) returned 0xc [0052.727] GetCurrentActCtx (in: lphActCtx=0x14e970 | out: lphActCtx=0x14e970*=0xa52648) returned 1 [0052.728] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0052.729] GetClassInfoW (in: hInstance=0x0, lpClassName="STATIC", lpWndClass=0x212a3c0 | out: lpWndClass=0x212a3c0) returned 1 [0052.730] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0052.730] CoTaskMemAlloc (cb=0x58) returned 0xa42c60 [0052.730] RegisterClassW (lpWndClass=0x14e650) returned 0xc142 [0052.730] CoTaskMemFree (pv=0xa42c60) [0052.730] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0052.730] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName="Label1", dwStyle=0x5600000d, X=12, Y=101, nWidth=39, nHeight=13, hWndParent=0x301d2, hMenu=0x0, hInstance=0xcc0000, lpParam=0x0) returned 0x3019e [0052.730] SetWindowLongPtrW (hWnd=0x3019e, nIndex=-4, dwNewLong=0x7fefba461b4) returned 0x1aff154c [0052.730] GetWindowLongPtrW (hWnd=0x3019e, nIndex=-4) returned 0x7fefba461b4 [0052.731] SetWindowLongPtrW (hWnd=0x3019e, nIndex=-4, dwNewLong=0x1aff159c) returned 0x7fefba461b4 [0052.731] GetWindowLongPtrW (hWnd=0x3019e, nIndex=-4) returned 0x1aff159c [0052.731] GetWindowLongPtrW (hWnd=0x3019e, nIndex=-16) returned 0x4600000d [0052.731] GetWindowLongPtrW (hWnd=0x3019e, nIndex=-12) returned 0x0 [0052.731] SetWindowLongPtrW (hWnd=0x3019e, nIndex=-12, dwNewLong=0x3019e) returned 0x0 [0052.731] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x81, wParam=0x0, lParam=0x14e030) returned 0x1 [0052.731] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x83, wParam=0x0, lParam=0x14e0e0) returned 0x0 [0052.731] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x1, wParam=0x0, lParam=0x14e010) returned 0x0 [0052.733] GetWindow (hWnd=0x3019e, uCmd=0x3) returned 0x0 [0052.733] GetClientRect (in: hWnd=0x3019e, lpRect=0x14da50 | out: lpRect=0x14da50) returned 1 [0052.733] GetWindowRect (in: hWnd=0x3019e, lpRect=0x14da50 | out: lpRect=0x14da50) returned 1 [0052.733] GetParent (hWnd=0x3019e) returned 0x301d2 [0052.733] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301d2, lpPoints=0x14da50, cPoints=0x2 | out: lpPoints=0x14da50) returned 2097184000 [0052.734] SetWindowTextW (hWnd=0x3019e, lpString="Label1") returned 1 [0052.734] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xc, wParam=0x0, lParam=0x2121004) returned 0x1 [0052.734] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x5, wParam=0x0, lParam=0xd0027) returned 0x0 [0052.734] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x3, wParam=0x0, lParam=0x65000c) returned 0x0 [0052.734] GetClientRect (in: hWnd=0x3019e, lpRect=0x14db80 | out: lpRect=0x14db80) returned 1 [0052.734] GetWindowRect (in: hWnd=0x3019e, lpRect=0x14db80 | out: lpRect=0x14db80) returned 1 [0052.734] GetParent (hWnd=0x3019e) returned 0x301d2 [0052.734] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301d2, lpPoints=0x14db80, cPoints=0x2 | out: lpPoints=0x14db80) returned 2097184000 [0052.736] SendMessageW (hWnd=0x3019e, Msg=0x2210, wParam=0x19e0001, lParam=0x3019e) returned 0x0 [0052.736] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x2210, wParam=0x19e0001, lParam=0x3019e) returned 0x0 [0052.736] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0052.737] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x46, wParam=0x0, lParam=0x14e0c0) returned 0x0 [0052.737] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x47, wParam=0x0, lParam=0x14e0c0) returned 0x0 [0052.737] GetClientRect (in: hWnd=0x3019e, lpRect=0x14daf0 | out: lpRect=0x14daf0) returned 1 [0052.737] GetWindowRect (in: hWnd=0x3019e, lpRect=0x14daf0 | out: lpRect=0x14daf0) returned 1 [0052.737] GetParent (hWnd=0x3019e) returned 0x301d2 [0052.737] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301d2, lpPoints=0x14daf0, cPoints=0x2 | out: lpPoints=0x14daf0) returned 2097184000 [0052.737] GetParent (hWnd=0x3019e) returned 0x301d2 [0052.737] GetParent (hWnd=0x3019e) returned 0x301d2 [0052.737] GetCurrentActCtx (in: lphActCtx=0x14e970 | out: lphActCtx=0x14e970*=0xa52648) returned 1 [0052.738] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0052.738] GetClassInfoW (in: hInstance=0x0, lpClassName="BUTTON", lpWndClass=0x212a8c8 | out: lpWndClass=0x212a8c8) returned 1 [0052.738] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0052.738] CoTaskMemAlloc (cb=0x58) returned 0xa42c60 [0052.738] RegisterClassW (lpWndClass=0x14e650) returned 0xc059 [0052.738] CoTaskMemFree (pv=0xa42c60) [0052.739] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0052.739] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r12_ad1", lpWindowName="Decrypt ALL", dwStyle=0x5601000b, X=13, Y=71, nWidth=157, nHeight=23, hWndParent=0x301d2, hMenu=0x0, hInstance=0xcc0000, lpParam=0x0) returned 0x70112 [0052.739] SetWindowLongPtrW (hWnd=0x70112, nIndex=-4, dwNewLong=0x7fefba43b20) returned 0x1aff15ec [0052.739] GetWindowLongPtrW (hWnd=0x70112, nIndex=-4) returned 0x7fefba43b20 [0052.739] SetWindowLongPtrW (hWnd=0x70112, nIndex=-4, dwNewLong=0x1aff163c) returned 0x7fefba43b20 [0052.739] GetWindowLongPtrW (hWnd=0x70112, nIndex=-4) returned 0x1aff163c [0052.739] GetWindowLongPtrW (hWnd=0x70112, nIndex=-16) returned 0x4601000b [0052.739] GetWindowLongPtrW (hWnd=0x70112, nIndex=-12) returned 0x0 [0052.739] SetWindowLongPtrW (hWnd=0x70112, nIndex=-12, dwNewLong=0x70112) returned 0x0 [0052.739] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x70112, Msg=0x81, wParam=0x0, lParam=0x14e030) returned 0x1 [0052.739] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x70112, Msg=0x83, wParam=0x0, lParam=0x14e0e0) returned 0x0 [0052.740] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x70112, Msg=0x1, wParam=0x0, lParam=0x14e010) returned 0x0 [0052.740] SendMessageW (hWnd=0x70112, Msg=0x2055, wParam=0x70112, lParam=0x3) returned 0x2 [0052.740] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0 [0052.740] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x70112, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0052.740] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0052.740] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0052.740] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0052.740] RedrawWindow (hWnd=0x3019e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0052.740] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x70112, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0052.740] RedrawWindow (hWnd=0x70112, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0052.741] RedrawWindow (hWnd=0x301d2, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0052.741] GetWindow (hWnd=0x70112, uCmd=0x3) returned 0x3019e [0052.741] GetClientRect (in: hWnd=0x70112, lpRect=0x14da20 | out: lpRect=0x14da20) returned 1 [0052.741] GetWindowRect (in: hWnd=0x70112, lpRect=0x14da20 | out: lpRect=0x14da20) returned 1 [0052.741] GetParent (hWnd=0x70112) returned 0x301d2 [0052.741] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301d2, lpPoints=0x14da20, cPoints=0x2 | out: lpPoints=0x14da20) returned 2097184000 [0052.741] SetWindowTextW (hWnd=0x70112, lpString="Decrypt ALL") returned 1 [0052.741] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x70112, Msg=0xc, wParam=0x0, lParam=0x2120fd4) returned 0x1 [0052.741] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x70112, Msg=0x5, wParam=0x0, lParam=0x17009d) returned 0x0 [0052.742] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x70112, Msg=0x3, wParam=0x0, lParam=0x47000d) returned 0x0 [0052.742] GetClientRect (in: hWnd=0x70112, lpRect=0x14db50 | out: lpRect=0x14db50) returned 1 [0052.742] GetWindowRect (in: hWnd=0x70112, lpRect=0x14db50 | out: lpRect=0x14db50) returned 1 [0052.742] GetParent (hWnd=0x70112) returned 0x301d2 [0052.742] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301d2, lpPoints=0x14db50, cPoints=0x2 | out: lpPoints=0x14db50) returned 2097184000 [0052.742] SendMessageW (hWnd=0x70112, Msg=0x2210, wParam=0x1120001, lParam=0x70112) returned 0x0 [0052.742] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x70112, Msg=0x2210, wParam=0x1120001, lParam=0x70112) returned 0x0 [0052.742] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x70112, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0052.742] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x70112, Msg=0x46, wParam=0x0, lParam=0x14e0c0) returned 0x0 [0052.742] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x70112, Msg=0x47, wParam=0x0, lParam=0x14e0c0) returned 0x0 [0052.742] GetClientRect (in: hWnd=0x70112, lpRect=0x14dac0 | out: lpRect=0x14dac0) returned 1 [0052.742] GetWindowRect (in: hWnd=0x70112, lpRect=0x14dac0 | out: lpRect=0x14dac0) returned 1 [0052.742] GetParent (hWnd=0x70112) returned 0x301d2 [0052.742] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301d2, lpPoints=0x14dac0, cPoints=0x2 | out: lpPoints=0x14dac0) returned 2097184000 [0052.742] GetParent (hWnd=0x70112) returned 0x301d2 [0052.742] GetParent (hWnd=0x70112) returned 0x301d2 [0052.742] GetCurrentActCtx (in: lphActCtx=0x14e970 | out: lphActCtx=0x14e970*=0xa52648) returned 1 [0052.743] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0052.743] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0052.743] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r12_ad1", lpWindowName="Encrypt ALL", dwStyle=0x5601000b, X=12, Y=42, nWidth=157, nHeight=23, hWndParent=0x301d2, hMenu=0x0, hInstance=0xcc0000, lpParam=0x0) returned 0x301a0 [0052.743] SetWindowLongPtrW (hWnd=0x301a0, nIndex=-4, dwNewLong=0x7fefba43b20) returned 0x1aff15ec [0052.743] GetWindowLongPtrW (hWnd=0x301a0, nIndex=-4) returned 0x7fefba43b20 [0052.743] SetWindowLongPtrW (hWnd=0x301a0, nIndex=-4, dwNewLong=0x1aff168c) returned 0x7fefba43b20 [0052.743] GetWindowLongPtrW (hWnd=0x301a0, nIndex=-4) returned 0x1aff168c [0052.743] GetWindowLongPtrW (hWnd=0x301a0, nIndex=-16) returned 0x4601000b [0052.743] GetWindowLongPtrW (hWnd=0x301a0, nIndex=-12) returned 0x0 [0052.743] SetWindowLongPtrW (hWnd=0x301a0, nIndex=-12, dwNewLong=0x301a0) returned 0x0 [0052.743] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301a0, Msg=0x81, wParam=0x0, lParam=0x14e030) returned 0x1 [0052.743] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301a0, Msg=0x83, wParam=0x0, lParam=0x14e0e0) returned 0x0 [0052.743] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301a0, Msg=0x1, wParam=0x0, lParam=0x14e010) returned 0x0 [0052.744] SendMessageW (hWnd=0x301a0, Msg=0x2055, wParam=0x301a0, lParam=0x3) returned 0x2 [0052.744] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0052.744] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301a0, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0052.744] GetWindow (hWnd=0x301a0, uCmd=0x3) returned 0x70112 [0052.744] GetClientRect (in: hWnd=0x301a0, lpRect=0x14da20 | out: lpRect=0x14da20) returned 1 [0052.744] GetWindowRect (in: hWnd=0x301a0, lpRect=0x14da20 | out: lpRect=0x14da20) returned 1 [0052.744] GetParent (hWnd=0x301a0) returned 0x301d2 [0052.744] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301d2, lpPoints=0x14da20, cPoints=0x2 | out: lpPoints=0x14da20) returned 2097184000 [0052.745] SetWindowTextW (hWnd=0x301a0, lpString="Encrypt ALL") returned 1 [0052.745] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301a0, Msg=0xc, wParam=0x0, lParam=0x2120f7c) returned 0x1 [0052.745] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301a0, Msg=0x5, wParam=0x0, lParam=0x17009d) returned 0x0 [0052.745] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301a0, Msg=0x3, wParam=0x0, lParam=0x2a000c) returned 0x0 [0052.745] GetClientRect (in: hWnd=0x301a0, lpRect=0x14db50 | out: lpRect=0x14db50) returned 1 [0052.745] GetWindowRect (in: hWnd=0x301a0, lpRect=0x14db50 | out: lpRect=0x14db50) returned 1 [0052.745] GetParent (hWnd=0x301a0) returned 0x301d2 [0052.745] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301d2, lpPoints=0x14db50, cPoints=0x2 | out: lpPoints=0x14db50) returned 2097184000 [0052.745] SendMessageW (hWnd=0x301a0, Msg=0x2210, wParam=0x1a00001, lParam=0x301a0) returned 0x0 [0052.745] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301a0, Msg=0x2210, wParam=0x1a00001, lParam=0x301a0) returned 0x0 [0052.745] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301a0, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0052.745] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301a0, Msg=0x46, wParam=0x0, lParam=0x14e0c0) returned 0x0 [0052.746] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301a0, Msg=0x47, wParam=0x0, lParam=0x14e0c0) returned 0x0 [0052.746] GetClientRect (in: hWnd=0x301a0, lpRect=0x14dac0 | out: lpRect=0x14dac0) returned 1 [0052.746] GetWindowRect (in: hWnd=0x301a0, lpRect=0x14dac0 | out: lpRect=0x14dac0) returned 1 [0052.746] GetParent (hWnd=0x301a0) returned 0x301d2 [0052.746] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301d2, lpPoints=0x14dac0, cPoints=0x2 | out: lpPoints=0x14dac0) returned 2097184000 [0052.746] GetParent (hWnd=0x301a0) returned 0x301d2 [0052.746] GetParent (hWnd=0x301a0) returned 0x301d2 [0052.746] GetCurrentActCtx (in: lphActCtx=0x14e970 | out: lphActCtx=0x14e970*=0xa52648) returned 1 [0052.746] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0052.746] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0052.746] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r12_ad1", lpWindowName="Decrypt", dwStyle=0x5601000b, X=94, Y=12, nWidth=75, nHeight=23, hWndParent=0x301d2, hMenu=0x0, hInstance=0xcc0000, lpParam=0x0) returned 0x301d4 [0052.746] SetWindowLongPtrW (hWnd=0x301d4, nIndex=-4, dwNewLong=0x7fefba43b20) returned 0x1aff15ec [0052.746] GetWindowLongPtrW (hWnd=0x301d4, nIndex=-4) returned 0x7fefba43b20 [0052.747] SetWindowLongPtrW (hWnd=0x301d4, nIndex=-4, dwNewLong=0x1aff16dc) returned 0x7fefba43b20 [0052.747] GetWindowLongPtrW (hWnd=0x301d4, nIndex=-4) returned 0x1aff16dc [0052.747] GetWindowLongPtrW (hWnd=0x301d4, nIndex=-16) returned 0x4601000b [0052.747] GetWindowLongPtrW (hWnd=0x301d4, nIndex=-12) returned 0x0 [0052.747] SetWindowLongPtrW (hWnd=0x301d4, nIndex=-12, dwNewLong=0x301d4) returned 0x0 [0052.747] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301d4, Msg=0x81, wParam=0x0, lParam=0x14e030) returned 0x1 [0052.747] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301d4, Msg=0x83, wParam=0x0, lParam=0x14e0e0) returned 0x0 [0052.747] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301d4, Msg=0x1, wParam=0x0, lParam=0x14e010) returned 0x0 [0052.747] SendMessageW (hWnd=0x301d4, Msg=0x2055, wParam=0x301d4, lParam=0x3) returned 0x2 [0052.747] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0052.747] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301d4, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0052.747] GetWindow (hWnd=0x301d4, uCmd=0x3) returned 0x301a0 [0052.747] GetClientRect (in: hWnd=0x301d4, lpRect=0x14da20 | out: lpRect=0x14da20) returned 1 [0052.747] GetWindowRect (in: hWnd=0x301d4, lpRect=0x14da20 | out: lpRect=0x14da20) returned 1 [0052.748] GetParent (hWnd=0x301d4) returned 0x301d2 [0052.748] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301d2, lpPoints=0x14da20, cPoints=0x2 | out: lpPoints=0x14da20) returned 2097184000 [0052.748] SetWindowTextW (hWnd=0x301d4, lpString="Decrypt") returned 1 [0052.748] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301d4, Msg=0xc, wParam=0x0, lParam=0x2120f2c) returned 0x1 [0052.748] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301d4, Msg=0x5, wParam=0x0, lParam=0x17004b) returned 0x0 [0052.748] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301d4, Msg=0x3, wParam=0x0, lParam=0xc005e) returned 0x0 [0052.748] GetClientRect (in: hWnd=0x301d4, lpRect=0x14db50 | out: lpRect=0x14db50) returned 1 [0052.748] GetWindowRect (in: hWnd=0x301d4, lpRect=0x14db50 | out: lpRect=0x14db50) returned 1 [0052.748] GetParent (hWnd=0x301d4) returned 0x301d2 [0052.748] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301d2, lpPoints=0x14db50, cPoints=0x2 | out: lpPoints=0x14db50) returned 2097184000 [0052.749] SendMessageW (hWnd=0x301d4, Msg=0x2210, wParam=0x1d40001, lParam=0x301d4) returned 0x0 [0052.749] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301d4, Msg=0x2210, wParam=0x1d40001, lParam=0x301d4) returned 0x0 [0052.749] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301d4, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0052.749] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301d4, Msg=0x46, wParam=0x0, lParam=0x14e0c0) returned 0x0 [0052.749] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301d4, Msg=0x47, wParam=0x0, lParam=0x14e0c0) returned 0x0 [0052.749] GetClientRect (in: hWnd=0x301d4, lpRect=0x14dac0 | out: lpRect=0x14dac0) returned 1 [0052.749] GetWindowRect (in: hWnd=0x301d4, lpRect=0x14dac0 | out: lpRect=0x14dac0) returned 1 [0052.749] GetParent (hWnd=0x301d4) returned 0x301d2 [0052.749] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301d2, lpPoints=0x14dac0, cPoints=0x2 | out: lpPoints=0x14dac0) returned 2097184000 [0052.749] GetParent (hWnd=0x301d4) returned 0x301d2 [0052.749] GetParent (hWnd=0x301d4) returned 0x301d2 [0052.749] GetCurrentActCtx (in: lphActCtx=0x14e970 | out: lphActCtx=0x14e970*=0xa52648) returned 1 [0052.750] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0052.750] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0052.750] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r12_ad1", lpWindowName="Encrypt", dwStyle=0x5601000b, X=13, Y=13, nWidth=75, nHeight=23, hWndParent=0x301d2, hMenu=0x0, hInstance=0xcc0000, lpParam=0x0) returned 0x20204 [0052.750] SetWindowLongPtrW (hWnd=0x20204, nIndex=-4, dwNewLong=0x7fefba43b20) returned 0x1aff15ec [0052.750] GetWindowLongPtrW (hWnd=0x20204, nIndex=-4) returned 0x7fefba43b20 [0052.750] SetWindowLongPtrW (hWnd=0x20204, nIndex=-4, dwNewLong=0x1aff172c) returned 0x7fefba43b20 [0052.750] GetWindowLongPtrW (hWnd=0x20204, nIndex=-4) returned 0x1aff172c [0052.750] GetWindowLongPtrW (hWnd=0x20204, nIndex=-16) returned 0x4601000b [0052.750] GetWindowLongPtrW (hWnd=0x20204, nIndex=-12) returned 0x0 [0052.750] SetWindowLongPtrW (hWnd=0x20204, nIndex=-12, dwNewLong=0x20204) returned 0x0 [0052.750] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x20204, Msg=0x81, wParam=0x0, lParam=0x14e030) returned 0x1 [0052.751] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x20204, Msg=0x83, wParam=0x0, lParam=0x14e0e0) returned 0x0 [0052.751] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x20204, Msg=0x1, wParam=0x0, lParam=0x14e010) returned 0x0 [0052.751] SendMessageW (hWnd=0x20204, Msg=0x2055, wParam=0x20204, lParam=0x3) returned 0x2 [0052.751] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0052.751] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x20204, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0052.751] GetWindow (hWnd=0x20204, uCmd=0x3) returned 0x301d4 [0052.751] GetClientRect (in: hWnd=0x20204, lpRect=0x14da20 | out: lpRect=0x14da20) returned 1 [0052.751] GetWindowRect (in: hWnd=0x20204, lpRect=0x14da20 | out: lpRect=0x14da20) returned 1 [0052.751] GetParent (hWnd=0x20204) returned 0x301d2 [0052.751] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301d2, lpPoints=0x14da20, cPoints=0x2 | out: lpPoints=0x14da20) returned 2097184000 [0052.754] SetWindowTextW (hWnd=0x20204, lpString="Encrypt") returned 1 [0052.754] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x20204, Msg=0xc, wParam=0x0, lParam=0x2120edc) returned 0x1 [0052.754] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x20204, Msg=0x5, wParam=0x0, lParam=0x17004b) returned 0x0 [0052.754] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x20204, Msg=0x3, wParam=0x0, lParam=0xd000d) returned 0x0 [0052.754] GetClientRect (in: hWnd=0x20204, lpRect=0x14db50 | out: lpRect=0x14db50) returned 1 [0052.754] GetWindowRect (in: hWnd=0x20204, lpRect=0x14db50 | out: lpRect=0x14db50) returned 1 [0052.754] GetParent (hWnd=0x20204) returned 0x301d2 [0052.754] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301d2, lpPoints=0x14db50, cPoints=0x2 | out: lpPoints=0x14db50) returned 2097184000 [0052.754] SendMessageW (hWnd=0x20204, Msg=0x2210, wParam=0x2040001, lParam=0x20204) returned 0x0 [0052.754] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x20204, Msg=0x2210, wParam=0x2040001, lParam=0x20204) returned 0x0 [0052.755] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x20204, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0052.755] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x20204, Msg=0x46, wParam=0x0, lParam=0x14e0c0) returned 0x0 [0052.755] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x20204, Msg=0x47, wParam=0x0, lParam=0x14e0c0) returned 0x0 [0052.755] GetClientRect (in: hWnd=0x20204, lpRect=0x14dac0 | out: lpRect=0x14dac0) returned 1 [0052.755] GetWindowRect (in: hWnd=0x20204, lpRect=0x14dac0 | out: lpRect=0x14dac0) returned 1 [0052.755] GetParent (hWnd=0x20204) returned 0x301d2 [0052.755] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301d2, lpPoints=0x14dac0, cPoints=0x2 | out: lpPoints=0x14dac0) returned 2097184000 [0052.755] GetParent (hWnd=0x20204) returned 0x301d2 [0052.755] GetParent (hWnd=0x20204) returned 0x301d2 [0052.755] SendMessageW (hWnd=0x301d2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0052.755] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0052.756] GetParent (hWnd=0x3019e) returned 0x301d2 [0052.756] GetParent (hWnd=0x70112) returned 0x301d2 [0052.756] GetParent (hWnd=0x301a0) returned 0x301d2 [0052.756] GetParent (hWnd=0x301d4) returned 0x301d2 [0052.756] GetParent (hWnd=0x20204) returned 0x301d2 [0052.757] GetWindowTextLengthW (hWnd=0x301d2) returned 12 [0052.757] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0052.757] GetSystemMetrics (nIndex=42) returned 0 [0052.757] GetWindowTextW (in: hWnd=0x301d2, lpString=0x14e580, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0052.757] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0xd, wParam=0xd, lParam=0x14e580) returned 0xc [0055.729] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0055.729] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents") returned 0x0 [0055.732] CoTaskMemFree (pv=0xa692f0) [0055.732] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x14dd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0055.746] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0055.746] SHGetFolderPathW (in: hwnd=0x0, csidl=13, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music") returned 0x0 [0055.748] CoTaskMemFree (pv=0xa692f0) [0055.748] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x14dd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0055.748] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0055.748] SHGetFolderPathW (in: hwnd=0x0, csidl=39, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures") returned 0x0 [0055.749] CoTaskMemFree (pv=0xa692f0) [0055.749] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x14dd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0055.749] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0055.749] SHGetFolderPathW (in: hwnd=0x0, csidl=14, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos") returned 0x0 [0055.750] CoTaskMemFree (pv=0xa692f0) [0055.750] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x14dd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0055.751] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0055.751] SHGetFolderPathW (in: hwnd=0x0, csidl=16, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 0x0 [0055.752] CoTaskMemFree (pv=0xa692f0) [0055.752] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x14dd70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0055.784] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x14d4e0 | out: lpLuid=0x14d4e0*(LowPart=0x14, HighPart=0)) returned 1 [0055.786] GetCurrentProcess () returned 0xffffffffffffffff [0055.786] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x20, TokenHandle=0x14d4d8 | out: TokenHandle=0x14d4d8*=0x248) returned 1 [0055.786] AdjustTokenPrivileges (in: TokenHandle=0x248, DisableAllPrivileges=0, NewState=0x212dfc8*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0055.787] CloseHandle (hObject=0x248) returned 1 [0055.797] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x12121930, Length=0x20000, ResultLength=0x14e3d0 | out: SystemInformation=0x12121930, ResultLength=0x14e3d0*=0xc4d0) returned 0x0 [0056.124] EtwEventRegister (in: ProviderId=0x214e638, EnableCallback=0x1aff177c, CallbackContext=0x0, RegHandle=0x214e618 | out: RegHandle=0x214e618) returned 0x0 [0056.205] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0056.205] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0056.207] CoTaskMemFree (pv=0xa692f0) [0056.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14dd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0056.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SadComputer.exe", nBufferLength=0x105, lpBuffer=0x14dd90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SadComputer.exe", lpFilePart=0x0) returned 0x35 [0056.247] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SadComputer.exe", nBufferLength=0x105, lpBuffer=0x14dc00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SadComputer.exe", lpFilePart=0x0) returned 0x35 [0056.248] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SadComputer.exe", nBufferLength=0x105, lpBuffer=0x14dd10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SadComputer.exe", lpFilePart=0x0) returned 0x35 [0056.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e150) returned 1 [0056.248] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SadComputer.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sadcomputer.exe"), fInfoLevelId=0x0, lpFileInformation=0x14e230 | out: lpFileInformation=0x14e230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc4f0c700, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xc4f0c700, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0x6de4f500, ftLastWriteTime.dwHighDateTime=0x1d4f131, nFileSizeHigh=0x0, nFileSizeLow=0x3ac00)) returned 1 [0056.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e110) returned 1 [0056.249] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SadComputer.exe", lpdwHandle=0x14e308 | out: lpdwHandle=0x14e308) returned 0x65c [0056.250] GetFileVersionInfoW (in: lptstrFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SadComputer.exe", dwHandle=0x0, dwLen=0x65c, lpData=0x21519e8 | out: lpData=0x21519e8) returned 1 [0056.251] VerQueryValueW (in: pBlock=0x21519e8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x14e288, puLen=0x14e280 | out: lplpBuffer=0x14e288*=0x2151a84, puLen=0x14e280) returned 1 [0056.252] VerQueryValueW (in: pBlock=0x21519e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x14e228, puLen=0x14e220 | out: lplpBuffer=0x14e228*=0x2151afc, puLen=0x14e220) returned 1 [0056.252] VerQueryValueW (in: pBlock=0x21519e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x14e228, puLen=0x14e220 | out: lplpBuffer=0x14e228*=0x2151b2c, puLen=0x14e220) returned 1 [0056.252] VerQueryValueW (in: pBlock=0x21519e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x14e228, puLen=0x14e220 | out: lplpBuffer=0x14e228*=0x2151b64, puLen=0x14e220) returned 1 [0056.253] VerQueryValueW (in: pBlock=0x21519e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x14e228, puLen=0x14e220 | out: lplpBuffer=0x14e228*=0x2151b94, puLen=0x14e220) returned 1 [0056.253] VerQueryValueW (in: pBlock=0x21519e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x14e228, puLen=0x14e220 | out: lplpBuffer=0x14e228*=0x2151bd8, puLen=0x14e220) returned 1 [0056.253] VerQueryValueW (in: pBlock=0x21519e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x14e228, puLen=0x14e220 | out: lplpBuffer=0x14e228*=0x2151c50, puLen=0x14e220) returned 1 [0056.253] VerQueryValueW (in: pBlock=0x21519e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x14e228, puLen=0x14e220 | out: lplpBuffer=0x14e228*=0x2151c90, puLen=0x14e220) returned 1 [0056.253] VerQueryValueW (in: pBlock=0x21519e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x14e228, puLen=0x14e220 | out: lplpBuffer=0x14e228*=0x2151ccc, puLen=0x14e220) returned 1 [0056.253] VerQueryValueW (in: pBlock=0x21519e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x14e228, puLen=0x14e220 | out: lplpBuffer=0x14e228*=0x2151ada, puLen=0x14e220) returned 1 [0056.267] VerQueryValueW (in: pBlock=0x21519e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x14e228, puLen=0x14e220 | out: lplpBuffer=0x14e228*=0x2151c20, puLen=0x14e220) returned 1 [0056.267] VerQueryValueW (in: pBlock=0x21519e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x14e228, puLen=0x14e220 | out: lplpBuffer=0x14e228*=0x0, puLen=0x14e220) returned 0 [0056.267] VerQueryValueW (in: pBlock=0x21519e8, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x14e228, puLen=0x14e220 | out: lplpBuffer=0x14e228*=0x0, puLen=0x14e220) returned 0 [0056.267] VerQueryValueW (in: pBlock=0x21519e8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x14e1d8, puLen=0x14e1d0 | out: lplpBuffer=0x14e1d8*=0x2151a84, puLen=0x14e1d0) returned 1 [0056.268] VerLanguageNameW (in: wLang=0x0, szLang=0x14df00, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0056.278] VerQueryValueW (in: pBlock=0x21519e8, lpSubBlock="\\", lplpBuffer=0x14e228, puLen=0x14e220 | out: lplpBuffer=0x14e228*=0x2151a10, puLen=0x14e220) returned 1 [0056.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14de80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0056.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e2c0) returned 1 [0056.302] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e3a0 | out: lpFileInformation=0x14e3a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0056.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e280) returned 1 [0056.303] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14de90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0056.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e1e0) returned 1 [0056.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e2c0 | out: lpFileInformation=0x14e2c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0056.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e1a0) returned 1 [0056.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e1e0) returned 1 [0056.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e2c0 | out: lpFileInformation=0x14e2c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0056.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e1a0) returned 1 [0056.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e1e0) returned 1 [0056.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer"), fInfoLevelId=0x0, lpFileInformation=0x14e2c0 | out: lpFileInformation=0x14e2c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0056.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e1a0) returned 1 [0056.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e1e0) returned 1 [0056.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer"), fInfoLevelId=0x0, lpFileInformation=0x14e2c0 | out: lpFileInformation=0x14e2c0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0056.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e1a0) returned 1 [0056.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e1e0) returned 1 [0056.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming"), fInfoLevelId=0x0, lpFileInformation=0x14e2c0 | out: lpFileInformation=0x14e2c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcb0042b0, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xcb0042b0, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0056.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e1a0) returned 1 [0056.304] CreateDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer"), lpSecurityAttributes=0x0) returned 1 [0056.306] CreateDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer"), lpSecurityAttributes=0x0) returned 1 [0056.306] CreateDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), lpSecurityAttributes=0x0) returned 1 [0056.309] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\recover", nBufferLength=0x105, lpBuffer=0x14df20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\recover", lpFilePart=0x0) returned 0x55 [0056.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e360) returned 1 [0056.309] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\recover" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\recover"), fInfoLevelId=0x0, lpFileInformation=0x14e440 | out: lpFileInformation=0x14e440*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0056.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e320) returned 1 [0056.376] GetUserObjectInformationA (in: hObj=0x44, nIndex=1, pvInfo=0x21546b8, nLength=0xc, lpnLengthNeeded=0x14e2d0 | out: pvInfo=0x21546b8, lpnLengthNeeded=0x14e2d0) returned 1 [0056.376] GetModuleHandleW (lpModuleName="shell32.dll") returned 0x7fefe4c0000 [0056.376] GetCurrentActCtx (in: lphActCtx=0x14e2b0 | out: lphActCtx=0x14e2b0*=0xa52648) returned 1 [0056.382] OleInitialize (pvReserved=0x0) returned 0x0 [0056.382] CoRegisterMessageFilter (in: lpMessageFilter=0x0, lplpMessageFilter=0x14e288 | out: lplpMessageFilter=0x14e288*=0x0) returned 0x0 [0056.413] GetCurrentThreadId () returned 0xa50 [0056.426] EnumThreadWindows (dwThreadId=0xa50, lpfn=0x1aff17cc, lParam=0x0) returned 1 [0056.428] IsWindowVisible (hWnd=0x301a2) returned 0 [0056.428] IsWindowVisible (hWnd=0x40120) returned 0 [0056.428] IsWindowVisible (hWnd=0x301d2) returned 1 [0056.428] IsWindowEnabled (hWnd=0x301d2) returned 1 [0056.428] IsWindowVisible (hWnd=0x40124) returned 0 [0056.428] GetActiveWindow () returned 0x0 [0056.429] IsWindow (hWnd=0x301d2) returned 1 [0056.431] EnableWindow (hWnd=0x301d2, bEnable=0) returned 0 [0056.431] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0056.431] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0xa, wParam=0x0, lParam=0x0) returned 0x0 [0056.433] MessageBoxW (hWnd=0x0, lpText="Are You Sure You want to install Antivirus software?", lpCaption="Antivirus", uType=0x124) returned 6 [0056.482] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301a2, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0056.482] NtdllDefWindowProc_W (hWnd=0x40120, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0056.482] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0057.379] IsWindow (hWnd=0x301d2) returned 1 [0057.379] EnableWindow (hWnd=0x301d2, bEnable=1) returned 1 [0057.379] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0xa, wParam=0x1, lParam=0x0) returned 0x0 [0057.380] SendMessageW (hWnd=0x0, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0057.498] GetComputerNameW (in: lpBuffer=0x14e170, nSize=0x14e498 | out: lpBuffer="XDUWTFONO", nSize=0x14e498) returned 1 [0057.635] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SadComputer.exe", nBufferLength=0x105, lpBuffer=0x14dd60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SadComputer.exe", lpFilePart=0x0) returned 0x35 [0057.680] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0x2001f, phkResult=0x14e248 | out: phkResult=0x14e248*=0x26c) returned 0x0 [0057.687] RegQueryValueExW (in: hKey=0x26c, lpValueName="XDUWTFONO", lpReserved=0x0, lpType=0x14e358, lpData=0x0, lpcbData=0x14e350*=0x0 | out: lpType=0x14e358*=0x0, lpData=0x0, lpcbData=0x14e350*=0x0) returned 0x2 [0057.687] RegSetValueExW (in: hKey=0x26c, lpValueName="XDUWTFONO", Reserved=0x0, dwType=0x1, lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SadComputer.exe\"", cbData=0x70 | out: lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SadComputer.exe\"") returned 0x0 [0057.688] RegCloseKey (hKey=0x26c) returned 0x0 [0057.690] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0057.690] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0057.690] CoTaskMemFree (pv=0xa692f0) [0057.690] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14dd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0057.690] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14de80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0057.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e2c0) returned 1 [0057.690] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e3a0 | out: lpFileInformation=0x14e3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe1d50480, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe1d50480, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0057.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e280) returned 1 [0057.723] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14dcc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0057.723] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e1a0) returned 1 [0057.724] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x26c [0057.724] GetFileType (hFile=0x26c) returned 0x1 [0057.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e110) returned 1 [0057.724] GetFileType (hFile=0x26c) returned 0x1 [0057.736] WriteFile (in: hFile=0x26c, lpBuffer=0x2159a70*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x14e1e8, lpOverlapped=0x0 | out: lpBuffer=0x2159a70*, lpNumberOfBytesWritten=0x14e1e8*=0x1, lpOverlapped=0x0) returned 1 [0057.737] CloseHandle (hObject=0x26c) returned 1 [0057.741] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0057.741] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0057.741] CoTaskMemFree (pv=0xa692f0) [0057.741] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14dd30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0057.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14de80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0057.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e2c0) returned 1 [0057.742] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e3a0 | out: lpFileInformation=0x14e3a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe27e0620, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe27e0620, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0057.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e280) returned 1 [0057.742] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\recover", nBufferLength=0x105, lpBuffer=0x14dcc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\recover", lpFilePart=0x0) returned 0x55 [0057.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e1a0) returned 1 [0057.742] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\recover" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\recover"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x26c [0057.742] GetFileType (hFile=0x26c) returned 0x1 [0057.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e110) returned 1 [0057.742] GetFileType (hFile=0x26c) returned 0x1 [0057.742] CloseHandle (hObject=0x26c) returned 1 [0057.805] GetCurrentActCtx (in: lphActCtx=0x14e310 | out: lphActCtx=0x14e310*=0xa52648) returned 1 [0057.806] PeekMessageW (in: lpMsg=0x14e260, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e260) returned 1 [0057.806] PeekMessageW (in: lpMsg=0x2117540, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2117540) returned 1 [0057.806] GetMessageA (in: lpMsg=0x14e260, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14e260) returned 1 [0057.808] TranslateMessage (lpMsg=0x14e260) returned 0 [0057.808] DispatchMessageA (lpMsg=0x14e260) returned 0x0 [0057.808] PeekMessageW (in: lpMsg=0x14e260, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e260) returned 1 [0057.808] PeekMessageW (in: lpMsg=0x2117540, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2117540) returned 1 [0057.809] IsWindowUnicode (hWnd=0x201ec) returned 1 [0057.809] GetMessageW (in: lpMsg=0x14e260, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14e260) returned 1 [0057.809] TranslateMessage (lpMsg=0x14e260) returned 0 [0057.809] DispatchMessageW (lpMsg=0x14e260) returned 0x0 [0057.809] PeekMessageW (in: lpMsg=0x14e260, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e260) returned 1 [0057.809] PeekMessageW (in: lpMsg=0x2117540, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2117540) returned 1 [0057.809] IsWindowUnicode (hWnd=0x201e6) returned 1 [0057.809] GetMessageW (in: lpMsg=0x14e260, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14e260) returned 1 [0057.809] TranslateMessage (lpMsg=0x14e260) returned 0 [0057.809] DispatchMessageW (lpMsg=0x14e260) returned 0x0 [0057.809] PeekMessageW (in: lpMsg=0x14e260, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e260) returned 0 [0057.809] GetWindowTextLengthW (hWnd=0x3019e) returned 6 [0057.809] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x6 [0057.809] GetSystemMetrics (nIndex=42) returned 0 [0057.810] GetWindowTextW (in: hWnd=0x3019e, lpString=0x14e1f0, nMaxCount=7 | out: lpString="Label1") returned 6 [0057.810] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xd, wParam=0x7, lParam=0x14e1f0) returned 0x6 [0057.810] GetWindowTextLengthW (hWnd=0x3019e) returned 6 [0057.810] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x6 [0057.810] GetSystemMetrics (nIndex=42) returned 0 [0057.810] GetWindowTextW (in: hWnd=0x3019e, lpString=0x14e190, nMaxCount=7 | out: lpString="Label1") returned 6 [0057.810] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xd, wParam=0x7, lParam=0x14e190) returned 0x6 [0057.810] SetWindowTextW (hWnd=0x3019e, lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents") returned 1 [0057.810] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xc, wParam=0x0, lParam=0x212becc) returned 0x1 [0057.810] GetStockObject (i=5) returned 0x1900015 [0057.811] GetDlgItem (hDlg=0x301d2, nIDDlgItem=197022) returned 0x3019e [0057.811] SendMessageW (hWnd=0x3019e, Msg=0x202b, wParam=0x3019e, lParam=0x14da50) returned 0x0 [0057.811] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x202b, wParam=0x3019e, lParam=0x14da50) returned 0x0 [0057.812] GetWindowTextLengthW (hWnd=0x3019e) returned 39 [0057.812] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x27 [0057.812] GetSystemMetrics (nIndex=42) returned 0 [0057.812] GetWindowTextW (in: hWnd=0x3019e, lpString=0x14e010, nMaxCount=40 | out: lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents") returned 39 [0057.812] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xd, wParam=0x28, lParam=0x14e010) returned 0x27 [0057.812] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0057.813] AdjustWindowRectEx (in: lpRect=0x14e078, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e078) returned 1 [0057.814] DrawTextExW (in: hdc=0x8010893, lpchText="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", cchText=39, lprc=0x14dfe8, format=0x102400, lpdtp=0x215d468 | out: lpchText="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lprc=0x14dfe8) returned 13 [0057.814] SetWindowPos (hWnd=0x3019e, hWndInsertAfter=0x0, X=12, Y=101, cx=231, cy=13, uFlags=0x16) returned 1 [0057.814] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x46, wParam=0x0, lParam=0x14e020) returned 0x0 [0057.815] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x83, wParam=0x1, lParam=0x14dff0) returned 0x0 [0057.815] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x47, wParam=0x0, lParam=0x14e020) returned 0x0 [0057.815] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x5, wParam=0x0, lParam=0xd00e7) returned 0x0 [0057.815] GetClientRect (in: hWnd=0x3019e, lpRect=0x14da50 | out: lpRect=0x14da50) returned 1 [0057.815] GetWindowRect (in: hWnd=0x3019e, lpRect=0x14da50 | out: lpRect=0x14da50) returned 1 [0057.815] GetParent (hWnd=0x3019e) returned 0x301d2 [0057.815] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301d2, lpPoints=0x14da50, cPoints=0x2 | out: lpPoints=0x14da50) returned 2097184000 [0057.816] InvalidateRect (hWnd=0x3019e, lpRect=0x0, bErase=1) returned 1 [0057.816] GetWindowTextLengthW (hWnd=0x3019e) returned 39 [0057.816] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x27 [0057.816] GetSystemMetrics (nIndex=42) returned 0 [0057.816] GetWindowTextW (in: hWnd=0x3019e, lpString=0x14d680, nMaxCount=40 | out: lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents") returned 39 [0057.816] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xd, wParam=0x28, lParam=0x14d680) returned 0x27 [0057.818] GetParent (hWnd=0x3019e) returned 0x301d2 [0057.818] InvalidateRect (hWnd=0x3019e, lpRect=0x0, bErase=1) returned 1 [0057.818] GetWindowTextLengthW (hWnd=0x301d2) returned 12 [0057.818] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0057.818] GetSystemMetrics (nIndex=42) returned 0 [0057.818] GetWindowTextW (in: hWnd=0x301d2, lpString=0x14dfd0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0057.818] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0xd, wParam=0xd, lParam=0x14dfd0) returned 0xc [0057.818] GetCurrentActCtx (in: lphActCtx=0x14e310 | out: lphActCtx=0x14e310*=0xa52648) returned 1 [0057.818] PeekMessageW (in: lpMsg=0x14e260, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e260) returned 0 [0057.880] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0057.880] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0057.880] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x3c [0057.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dfb0) returned 1 [0057.881] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x26c [0057.881] GetFileType (hFile=0x26c) returned 0x1 [0057.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14df20) returned 1 [0057.881] GetFileType (hFile=0x26c) returned 0x1 [0057.881] WriteFile (in: hFile=0x26c, lpBuffer=0x215f0b0*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x14dff8, lpOverlapped=0x0 | out: lpBuffer=0x215f0b0*, lpNumberOfBytesWritten=0x14dff8*=0x119, lpOverlapped=0x0) returned 1 [0057.887] CloseHandle (hObject=0x26c) returned 1 [0057.888] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0057.888] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0057.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e190) returned 1 [0057.893] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x14dc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0057.893] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\", nBufferLength=0x105, lpBuffer=0x14dc20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\", lpFilePart=0x0) returned 0x28 [0057.894] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x14de30 | out: lpFindFileData=0x14de30) returned 0xa74640 [0057.895] FindNextFileW (in: hFindFile=0xa74640, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0057.895] FindNextFileW (in: hFindFile=0xa74640, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0057.895] FindNextFileW (in: hFindFile=0xa74640, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0057.895] FindNextFileW (in: hFindFile=0xa74640, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0057.895] FindNextFileW (in: hFindFile=0xa74640, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0057.896] FindNextFileW (in: hFindFile=0xa74640, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0057.896] FindNextFileW (in: hFindFile=0xa74640, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0057.896] FindNextFileW (in: hFindFile=0xa74640, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0057.896] FindNextFileW (in: hFindFile=0xa74640, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0057.896] FindNextFileW (in: hFindFile=0xa74640, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0057.896] FindNextFileW (in: hFindFile=0xa74640, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0057.897] FindNextFileW (in: hFindFile=0xa74640, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0057.897] FindNextFileW (in: hFindFile=0xa74640, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0057.897] FindNextFileW (in: hFindFile=0xa74640, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0057.897] FindNextFileW (in: hFindFile=0xa74640, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0057.897] FindNextFileW (in: hFindFile=0xa74640, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0057.898] FindNextFileW (in: hFindFile=0xa74640, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0057.898] FindNextFileW (in: hFindFile=0xa74640, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0057.898] FindNextFileW (in: hFindFile=0xa74640, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0057.898] FindNextFileW (in: hFindFile=0xa74640, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0057.898] FindNextFileW (in: hFindFile=0xa74640, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0057.898] FindNextFileW (in: hFindFile=0xa74640, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0057.898] FindNextFileW (in: hFindFile=0xa74640, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0057.899] FindNextFileW (in: hFindFile=0xa74640, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0057.899] FindNextFileW (in: hFindFile=0xa74640, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0057.899] FindNextFileW (in: hFindFile=0xa74640, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0057.899] FindNextFileW (in: hFindFile=0xa74640, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0057.899] FindNextFileW (in: hFindFile=0xa74640, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0057.899] FindNextFileW (in: hFindFile=0xa74640, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0057.899] FindNextFileW (in: hFindFile=0xa74640, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0057.900] FindNextFileW (in: hFindFile=0xa74640, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 0 [0057.900] FindClose (in: hFindFile=0xa74640 | out: hFindFile=0xa74640) returned 1 [0057.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e0e0) returned 1 [0057.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e0a0) returned 1 [0057.900] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0057.900] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0057.958] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0057.958] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0057.958] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2otCK2h1 K6KzQyuK.rtf", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2otCK2h1 K6KzQyuK.rtf", lpFilePart=0x0) returned 0x3d [0057.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0057.958] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2otCK2h1 K6KzQyuK.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2otck2h1 k6kzqyuk.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x26c [0057.958] GetFileType (hFile=0x26c) returned 0x1 [0057.958] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0057.958] GetFileType (hFile=0x26c) returned 0x1 [0057.958] GetFileSize (in: hFile=0x26c, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x73bc [0057.959] ReadFile (in: hFile=0x26c, lpBuffer=0x2164b70, nNumberOfBytesToRead=0x73bc, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x2164b70*, lpNumberOfBytesRead=0x14df78*=0x73bc, lpOverlapped=0x0) returned 1 [0057.960] CloseHandle (hObject=0x26c) returned 1 [0057.967] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2otCK2h1 K6KzQyuK.rtf", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2otCK2h1 K6KzQyuK.rtf", lpFilePart=0x0) returned 0x3d [0057.967] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2otCK2h1 K6KzQyuK.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2otck2h1 k6kzqyuk.rtf")) returned 1 [0057.972] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2otCK2h1 K6KzQyuK.rtf.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2otCK2h1 K6KzQyuK.rtf.sad", lpFilePart=0x0) returned 0x41 [0057.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0057.973] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2otCK2h1 K6KzQyuK.rtf.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2otck2h1 k6kzqyuk.rtf.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x26c [0057.973] GetFileType (hFile=0x26c) returned 0x1 [0057.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0057.974] GetFileType (hFile=0x26c) returned 0x1 [0057.974] WriteFile (in: hFile=0x26c, lpBuffer=0x2181008*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181008*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0057.976] WriteFile (in: hFile=0x26c, lpBuffer=0x2181008*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181008*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0057.976] WriteFile (in: hFile=0x26c, lpBuffer=0x2181008*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181008*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0057.977] WriteFile (in: hFile=0x26c, lpBuffer=0x2181008*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181008*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0057.977] WriteFile (in: hFile=0x26c, lpBuffer=0x2181008*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181008*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0057.978] WriteFile (in: hFile=0x26c, lpBuffer=0x2181008*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181008*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0057.978] WriteFile (in: hFile=0x26c, lpBuffer=0x2181008*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181008*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0057.978] WriteFile (in: hFile=0x26c, lpBuffer=0x2181008*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181008*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0057.979] WriteFile (in: hFile=0x26c, lpBuffer=0x2181008*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181008*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0057.979] WriteFile (in: hFile=0x26c, lpBuffer=0x2181008*, nNumberOfBytesToWrite=0xa50, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x2181008*, lpNumberOfBytesWritten=0x14de38*=0xa50, lpOverlapped=0x0) returned 1 [0057.979] CloseHandle (hObject=0x26c) returned 1 [0057.980] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0057.980] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0058.034] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0058.034] AdjustWindowRectEx (in: lpRect=0x14d6e0, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x14d6e0) returned 1 [0058.268] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0058.268] AdjustWindowRectEx (in: lpRect=0x14d1e0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d1e0) returned 1 [0058.282] GetDC (hWnd=0x0) returned 0x5010830 [0058.282] GdipCreateFromHDC (hdc=0x5010830, graphics=0x14cf38) returned 0x0 [0058.282] GdipGetFontHeight (font=0x1afa3a40, graphics=0x1af3d3c0, height=0x14cf34) returned 0x0 [0058.282] GdipDeleteGraphics (graphics=0x1af3d3c0) returned 0x0 [0058.283] ReleaseDC (hWnd=0x0, hDC=0x5010830) returned 1 [0058.283] GetSystemMetrics (nIndex=5) returned 1 [0058.283] GetSystemMetrics (nIndex=6) returned 1 [0058.283] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0058.284] AdjustWindowRectEx (in: lpRect=0x14d1e0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d1e0) returned 1 [0058.292] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0058.292] AdjustWindowRectEx (in: lpRect=0x14d1c0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d1c0) returned 1 [0058.307] GetDC (hWnd=0x0) returned 0x5010830 [0058.307] GdipCreateFromHDC (hdc=0x5010830, graphics=0x14cf38) returned 0x0 [0058.308] GdipGetFontHeight (font=0x1afa3a40, graphics=0x1af3d3c0, height=0x14cf34) returned 0x0 [0058.308] GdipDeleteGraphics (graphics=0x1af3d3c0) returned 0x0 [0058.308] ReleaseDC (hWnd=0x0, hDC=0x5010830) returned 1 [0058.308] GetSystemMetrics (nIndex=5) returned 1 [0058.308] GetSystemMetrics (nIndex=6) returned 1 [0058.308] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0058.308] AdjustWindowRectEx (in: lpRect=0x14d1e0, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d1e0) returned 1 [0058.317] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0058.317] AdjustWindowRectEx (in: lpRect=0x14d1e0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d1e0) returned 1 [0058.325] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0058.325] AdjustWindowRectEx (in: lpRect=0x14d1e0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d1e0) returned 1 [0058.351] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0058.351] AdjustWindowRectEx (in: lpRect=0x14d1e0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d1e0) returned 1 [0058.359] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0058.359] AdjustWindowRectEx (in: lpRect=0x14d1e0, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d1e0) returned 1 [0058.383] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0058.383] AdjustWindowRectEx (in: lpRect=0x14d1c0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d1c0) returned 1 [0058.406] GdipCreateFontFamilyFromName (name="Times New Roman", fontCollection=0x0, fontFamily=0x14d190) returned 0x0 [0058.407] GdipCreateFont (fontFamily=0x1af09a70, emSize=0x7feeffbcd25, style=0, unit=0x3, font=0x2185618) returned 0x0 [0058.694] GdipGetFontSize (font=0x1b4741a0, size=0x2185620) returned 0x0 [0058.696] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0058.696] AdjustWindowRectEx (in: lpRect=0x14d078, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d078) returned 1 [0058.696] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0058.696] AdjustWindowRectEx (in: lpRect=0x14d078, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d078) returned 1 [0058.704] GdipCreateFontFamilyFromName (name="Times New Roman", fontCollection=0x0, fontFamily=0x14d190) returned 0x0 [0058.705] GdipCreateFont (fontFamily=0x1af09a70, emSize=0x7feeffbcd25, style=0, unit=0x3, font=0x2185968) returned 0x0 [0058.705] GdipGetFontSize (font=0x1af4c4b0, size=0x2185970) returned 0x0 [0058.705] GetDC (hWnd=0x0) returned 0x5010830 [0058.705] GdipCreateFromHDC (hdc=0x5010830, graphics=0x14d0e8) returned 0x0 [0058.705] GdipGetFontHeight (font=0x1af4c4b0, graphics=0x1afd8140, height=0x14d0e4) returned 0x0 [0058.705] GdipDeleteGraphics (graphics=0x1afd8140) returned 0x0 [0058.705] ReleaseDC (hWnd=0x0, hDC=0x5010830) returned 1 [0058.706] GetDC (hWnd=0x0) returned 0x5010830 [0058.706] GdipCreateFromHDC (hdc=0x5010830, graphics=0x14cfb8) returned 0x0 [0058.706] GdipGetFontHeight (font=0x1af4c4b0, graphics=0x1afd8140, height=0x14cfb4) returned 0x0 [0058.706] GdipDeleteGraphics (graphics=0x1afd8140) returned 0x0 [0058.706] ReleaseDC (hWnd=0x0, hDC=0x5010830) returned 1 [0058.706] GetSystemMetrics (nIndex=5) returned 1 [0058.706] GetSystemMetrics (nIndex=6) returned 1 [0058.706] GetSystemMetrics (nIndex=5) returned 1 [0058.706] GetSystemMetrics (nIndex=6) returned 1 [0058.706] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0058.706] AdjustWindowRectEx (in: lpRect=0x14d008, dwStyle=0x5e0100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d008) returned 1 [0058.706] GetSystemMetrics (nIndex=5) returned 1 [0058.706] GetSystemMetrics (nIndex=6) returned 1 [0058.707] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0058.707] AdjustWindowRectEx (in: lpRect=0x14d0e8, dwStyle=0x5e0100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d0e8) returned 1 [0058.707] GetSystemMetrics (nIndex=5) returned 1 [0058.707] GetSystemMetrics (nIndex=6) returned 1 [0058.707] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0058.707] AdjustWindowRectEx (in: lpRect=0x14d008, dwStyle=0x5e010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d008) returned 1 [0058.707] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0058.707] AdjustWindowRectEx (in: lpRect=0x14d008, dwStyle=0x5e010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d008) returned 1 [0058.707] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0058.707] AdjustWindowRectEx (in: lpRect=0x14d0e8, dwStyle=0x5e010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d0e8) returned 1 [0058.709] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SadComputer.exe.config", nBufferLength=0x105, lpBuffer=0x14c8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SadComputer.exe.config", lpFilePart=0x0) returned 0x3c [0058.710] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14cdb0) returned 1 [0058.710] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SadComputer.exe.config" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sadcomputer.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x14ce90 | out: lpFileInformation=0x14ce90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0058.710] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14cd70) returned 1 [0058.920] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x14d190) returned 0x0 [0058.920] GdipCreateFont (fontFamily=0x1b47c5e0, emSize=0x7feeffbcd25, style=1, unit=0x3, font=0x2188ef0) returned 0x0 [0058.920] GdipGetFontSize (font=0x1afdff50, size=0x2188ef8) returned 0x0 [0058.957] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0058.957] AdjustWindowRectEx (in: lpRect=0x14d0e8, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d0e8) returned 1 [0058.957] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0058.957] AdjustWindowRectEx (in: lpRect=0x14d0e8, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d0e8) returned 1 [0058.964] GetSystemMetrics (nIndex=5) returned 1 [0058.964] GetSystemMetrics (nIndex=6) returned 1 [0058.964] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0058.965] AdjustWindowRectEx (in: lpRect=0x14d0e8, dwStyle=0x5e0100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d0e8) returned 1 [0058.965] GetSystemMetrics (nIndex=5) returned 1 [0058.965] GetSystemMetrics (nIndex=6) returned 1 [0058.965] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0058.965] AdjustWindowRectEx (in: lpRect=0x14d0e8, dwStyle=0x5e0100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d0e8) returned 1 [0058.968] GdipCreateFontFamilyFromName (name="Times New Roman", fontCollection=0x0, fontFamily=0x14d190) returned 0x0 [0058.969] GdipCreateFont (fontFamily=0x1af09a70, emSize=0x7feeffbcd25, style=0, unit=0x3, font=0x21892e8) returned 0x0 [0058.969] GdipGetFontSize (font=0x1afdff90, size=0x21892f0) returned 0x0 [0058.969] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0058.969] AdjustWindowRectEx (in: lpRect=0x14d078, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d078) returned 1 [0058.969] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0058.969] AdjustWindowRectEx (in: lpRect=0x14d078, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d078) returned 1 [0058.973] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0058.973] AdjustWindowRectEx (in: lpRect=0x14d078, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d078) returned 1 [0058.973] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0058.973] AdjustWindowRectEx (in: lpRect=0x14d078, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d078) returned 1 [0058.981] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x14d190) returned 0x0 [0058.982] GdipCreateFont (fontFamily=0x1b47c5e0, emSize=0x7feeffbcd25, style=0, unit=0x3, font=0x21896e8) returned 0x0 [0058.982] GdipGetFontSize (font=0x1ba308b0, size=0x21896f0) returned 0x0 [0058.983] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0058.983] AdjustWindowRectEx (in: lpRect=0x14d078, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d078) returned 1 [0058.983] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0058.984] AdjustWindowRectEx (in: lpRect=0x14d078, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d078) returned 1 [0058.988] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x14d190) returned 0x0 [0058.989] GdipCreateFont (fontFamily=0x1b47c5e0, emSize=0x7feeffbcd25, style=0, unit=0x3, font=0x2189a18) returned 0x0 [0058.989] GdipGetFontSize (font=0x1ba308f0, size=0x2189a20) returned 0x0 [0058.989] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0058.989] AdjustWindowRectEx (in: lpRect=0x14d078, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d078) returned 1 [0058.989] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0058.989] AdjustWindowRectEx (in: lpRect=0x14d078, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d078) returned 1 [0059.009] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0059.010] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.0.app.0.141b42a_r12_ad1", lpWindowName="TimerNativeWindow", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffffffffffd, hMenu=0x0, hInstance=0xcc0000, lpParam=0x0) returned 0x301ee [0059.010] SetWindowLongPtrW (hWnd=0x301ee, nIndex=-4, dwNewLong=0x76f7b0ac) returned 0x1aff14ac [0059.010] GetWindowLongPtrW (hWnd=0x301ee, nIndex=-4) returned 0x76f7b0ac [0059.010] SetWindowLongPtrW (hWnd=0x301ee, nIndex=-4, dwNewLong=0x1aff181c) returned 0x76f7b0ac [0059.010] GetWindowLongPtrW (hWnd=0x301ee, nIndex=-4) returned 0x1aff181c [0059.010] GetWindowLongPtrW (hWnd=0x301ee, nIndex=-16) returned 0x4c00000 [0059.010] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301ee, Msg=0x24, wParam=0x0, lParam=0x14c840) returned 0x0 [0059.010] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301ee, Msg=0x81, wParam=0x0, lParam=0x14c7b0) returned 0x1 [0059.010] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301ee, Msg=0x83, wParam=0x0, lParam=0x14c860) returned 0x0 [0059.010] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301ee, Msg=0x1, wParam=0x0, lParam=0x14c780) returned 0x0 [0059.011] SetTimer (hWnd=0x301ee, nIDEvent=0x1, uElapse=0x64, lpTimerFunc=0x0) returned 0x1 [0059.013] GetWindowThreadProcessId (in: hWnd=0x301ee, lpdwProcessId=0x14d100 | out: lpdwProcessId=0x14d100) returned 0xa50 [0059.013] GetCurrentThreadId () returned 0xa50 [0059.013] IsWindow (hWnd=0x301ee) returned 1 [0059.013] KillTimer (hWnd=0x301ee, uIDEvent=0x1) returned 1 [0059.013] SetTimer (hWnd=0x301ee, nIDEvent=0x2, uElapse=0x3e8, lpTimerFunc=0x0) returned 0x2 [0059.018] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x14d190) returned 0x0 [0059.019] GdipCreateFont (fontFamily=0x1b47c5e0, emSize=0x7feeffbcd25, style=1, unit=0x3, font=0x2189f70) returned 0x0 [0059.019] GdipGetFontSize (font=0x1ba30930, size=0x2189f78) returned 0x0 [0059.019] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.019] AdjustWindowRectEx (in: lpRect=0x14d0e8, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d0e8) returned 1 [0059.019] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.019] AdjustWindowRectEx (in: lpRect=0x14d0e8, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d0e8) returned 1 [0059.020] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.020] AdjustWindowRectEx (in: lpRect=0x14d148, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x14d148) returned 1 [0059.020] GetSystemMetrics (nIndex=59) returned 1460 [0059.020] GetSystemMetrics (nIndex=60) returned 920 [0059.020] GetSystemMetrics (nIndex=34) returned 132 [0059.020] GetSystemMetrics (nIndex=35) returned 38 [0059.021] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.021] AdjustWindowRectEx (in: lpRect=0x14cf08, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x14cf08) returned 1 [0059.021] GetCurrentThreadId () returned 0xa50 [0059.021] GetCurrentThreadId () returned 0xa50 [0059.021] GetCurrentThreadId () returned 0xa50 [0059.021] GetCurrentThreadId () returned 0xa50 [0059.021] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.021] AdjustWindowRectEx (in: lpRect=0x14ce58, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14ce58) returned 1 [0059.021] GdipGetFamilyName (in: family=0x1b47c5e0, name=0x14cba0, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0059.021] GetDeviceCaps (hdc=0x8010893, index=90) returned 96 [0059.021] CoTaskMemAlloc (cb=0x5c) returned 0xa5ed70 [0059.021] CreateFontIndirectW (lplf=0xa5ed70) returned 0x200a0899 [0059.022] CoTaskMemFree (pv=0xa5ed70) [0059.022] GetObjectW (in: h=0x200a0899, c=92, pv=0x14cbb0 | out: pv=0x14cbb0) returned 92 [0059.035] SelectObject (hdc=0x8010893, h=0x200a0899) returned 0xb0a087e [0059.035] GetMapMode (hdc=0x8010893) returned 1 [0059.035] GetTextMetricsW (in: hdc=0x8010893, lptm=0x14cbc0 | out: lptm=0x14cbc0) returned 1 [0059.036] DrawTextExW (in: hdc=0x8010893, lpchText="00:00:00", cchText=8, lprc=0x14cdc8, format=0x2400, lpdtp=0x218a7f8 | out: lpchText="00:00:00", lprc=0x14cdc8) returned 20 [0059.041] GetCurrentThreadId () returned 0xa50 [0059.041] GetCurrentThreadId () returned 0xa50 [0059.042] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.042] AdjustWindowRectEx (in: lpRect=0x14ce58, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14ce58) returned 1 [0059.042] GdipGetFamilyName (in: family=0x1b47c5e0, name=0x14cba0, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0059.042] GetDeviceCaps (hdc=0x8010893, index=90) returned 96 [0059.042] CoTaskMemAlloc (cb=0x5c) returned 0xa5ed70 [0059.042] CreateFontIndirectW (lplf=0xa5ed70) returned 0xffffffffc80a01db [0059.042] CoTaskMemFree (pv=0xa5ed70) [0059.042] GetObjectW (in: h=0xffffffffc80a01db, c=92, pv=0x14cbb0 | out: pv=0x14cbb0) returned 92 [0059.042] SelectObject (hdc=0x8010893, h=0xffffffffc80a01db) returned 0x200a0899 [0059.042] GetMapMode (hdc=0x8010893) returned 1 [0059.042] GetTextMetricsW (in: hdc=0x8010893, lptm=0x14cbc0 | out: lptm=0x14cbc0) returned 1 [0059.042] DrawTextExW (in: hdc=0x8010893, lpchText="Your Files Will Be Deleted on", cchText=29, lprc=0x14cdc8, format=0x2400, lpdtp=0x218abd0 | out: lpchText="Your Files Will Be Deleted on", lprc=0x14cdc8) returned 13 [0059.043] GetCurrentThreadId () returned 0xa50 [0059.043] GetCurrentThreadId () returned 0xa50 [0059.043] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.043] AdjustWindowRectEx (in: lpRect=0x14ce58, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14ce58) returned 1 [0059.045] DrawTextExW (in: hdc=0x8010893, lpchText="0", cchText=1, lprc=0x14cdc8, format=0x2400, lpdtp=0x218ad80 | out: lpchText="0", lprc=0x14cdc8) returned 13 [0059.045] GetCurrentThreadId () returned 0xa50 [0059.045] GetCurrentThreadId () returned 0xa50 [0059.045] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.046] AdjustWindowRectEx (in: lpRect=0x14ce58, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14ce58) returned 1 [0059.046] GdipGetFamilyName (in: family=0x1af09a70, name=0x14cba0, language=0x409 | out: name="Times New Roman") returned 0x0 [0059.046] GetDeviceCaps (hdc=0x8010893, index=90) returned 96 [0059.046] CoTaskMemAlloc (cb=0x5c) returned 0xa5ed70 [0059.046] CreateFontIndirectW (lplf=0xa5ed70) returned 0x370a08a3 [0059.046] CoTaskMemFree (pv=0xa5ed70) [0059.046] GetObjectW (in: h=0x370a08a3, c=92, pv=0x14cbb0 | out: pv=0x14cbb0) returned 92 [0059.046] SelectObject (hdc=0x8010893, h=0x370a08a3) returned 0xffffffffc80a01db [0059.046] GetMapMode (hdc=0x8010893) returned 1 [0059.046] GetTextMetricsW (in: hdc=0x8010893, lptm=0x14cbc0 | out: lptm=0x14cbc0) returned 1 [0059.047] DrawTextExW (in: hdc=0x8010893, lpchText="Bitcoin Address:", cchText=16, lprc=0x14cdc8, format=0x2400, lpdtp=0x218b158 | out: lpchText="Bitcoin Address:", lprc=0x14cdc8) returned 15 [0059.105] GetCurrentThreadId () returned 0xa50 [0059.105] GetCurrentThreadId () returned 0xa50 [0059.105] GetCurrentThreadId () returned 0xa50 [0059.105] GetCurrentThreadId () returned 0xa50 [0059.105] GetCurrentThreadId () returned 0xa50 [0059.105] GetCurrentThreadId () returned 0xa50 [0059.105] GetCurrentThreadId () returned 0xa50 [0059.105] GetCurrentThreadId () returned 0xa50 [0059.105] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.106] AdjustWindowRectEx (in: lpRect=0x14ce58, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14ce58) returned 1 [0059.106] GdipGetFamilyName (in: family=0x1af09a70, name=0x14cba0, language=0x409 | out: name="Times New Roman") returned 0x0 [0059.106] GetDeviceCaps (hdc=0x8010893, index=90) returned 96 [0059.106] CoTaskMemAlloc (cb=0x5c) returned 0xa5ed70 [0059.106] CreateFontIndirectW (lplf=0xa5ed70) returned 0x160a0258 [0059.106] CoTaskMemFree (pv=0xa5ed70) [0059.106] GetObjectW (in: h=0x160a0258, c=92, pv=0x14cbb0 | out: pv=0x14cbb0) returned 92 [0059.106] SelectObject (hdc=0x8010893, h=0x160a0258) returned 0x370a08a3 [0059.106] GetMapMode (hdc=0x8010893) returned 1 [0059.106] GetTextMetricsW (in: hdc=0x8010893, lptm=0x14cbc0 | out: lptm=0x14cbc0) returned 1 [0059.107] DrawTextExW (in: hdc=0x8010893, lpchText="Your Files are Encrypted", cchText=24, lprc=0x14cdc8, format=0x2400, lpdtp=0x218b730 | out: lpchText="Your Files are Encrypted", lprc=0x14cdc8) returned 23 [0059.121] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.121] AdjustWindowRectEx (in: lpRect=0x14cf50, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x14cf50) returned 1 [0059.121] AdjustWindowRectEx (in: lpRect=0x14d0c8, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x14d0c8) returned 1 [0059.121] GetSystemMetrics (nIndex=59) returned 1460 [0059.121] GetSystemMetrics (nIndex=60) returned 920 [0059.121] GetSystemMetrics (nIndex=34) returned 132 [0059.121] GetSystemMetrics (nIndex=35) returned 38 [0059.121] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.121] AdjustWindowRectEx (in: lpRect=0x14cd00, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x14cd00) returned 1 [0059.121] AdjustWindowRectEx (in: lpRect=0x14ce88, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x14ce88) returned 1 [0059.123] GetSystemMetrics (nIndex=80) returned 1 [0059.123] MonitorFromRect (lprc=0x14d108, dwFlags=0x2) returned 0x10001 [0059.124] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x14cf20 | out: lpmi=0x14cf20) returned 1 [0059.125] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x1a01027a [0059.125] GetDeviceCaps (hdc=0x1a01027a, index=12) returned 32 [0059.125] GetDeviceCaps (hdc=0x1a01027a, index=14) returned 1 [0059.125] DeleteDC (hdc=0x1a01027a) returned 1 [0059.125] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x14cf80 | out: lpmi=0x14cf80) returned 1 [0059.126] GetSystemMetrics (nIndex=59) returned 1460 [0059.126] GetSystemMetrics (nIndex=60) returned 920 [0059.126] GetSystemMetrics (nIndex=34) returned 132 [0059.126] GetSystemMetrics (nIndex=35) returned 38 [0059.126] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.126] AdjustWindowRectEx (in: lpRect=0x14cd30, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x14cd30) returned 1 [0059.126] AdjustWindowRectEx (in: lpRect=0x14ceb8, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x14ceb8) returned 1 [0059.128] CreateCompatibleDC (hdc=0x0) returned 0x1b01027a [0059.128] SelectObject (hdc=0x1b01027a, h=0x60a0875) returned 0x18a002e [0059.128] GetTextMetricsW (in: hdc=0x1b01027a, lptm=0x14d018 | out: lptm=0x14d018) returned 1 [0059.128] GetTextExtentPoint32W (in: hdc=0x1b01027a, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x218c4d8 | out: psizl=0x218c4d8) returned 1 [0059.128] SelectObject (hdc=0x1b01027a, h=0x18a002e) returned 0x60a0875 [0059.128] DeleteDC (hdc=0x1b01027a) returned 1 [0059.128] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.128] AdjustWindowRectEx (in: lpRect=0x14cc80, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x14cc80) returned 1 [0059.129] GetCursorPos (in: lpPoint=0x218c510 | out: lpPoint=0x218c510*(x=781, y=505)) returned 1 [0059.142] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x14ca30 | out: lpmi=0x14ca30) returned 1 [0059.142] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x1c01027a [0059.142] GetDeviceCaps (hdc=0x1c01027a, index=12) returned 32 [0059.142] GetDeviceCaps (hdc=0x1c01027a, index=14) returned 1 [0059.142] DeleteDC (hdc=0x1c01027a) returned 1 [0059.142] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x14cb00 | out: lpmi=0x14cb00) returned 1 [0059.142] AdjustWindowRectEx (in: lpRect=0x14cf00, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x14cf00) returned 1 [0059.142] MonitorFromRect (lprc=0x14cc68, dwFlags=0x2) returned 0x10001 [0059.142] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x14ca80 | out: lpmi=0x14ca80) returned 1 [0059.142] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x1d01027a [0059.142] GetDeviceCaps (hdc=0x1d01027a, index=12) returned 32 [0059.142] GetDeviceCaps (hdc=0x1d01027a, index=14) returned 1 [0059.142] DeleteDC (hdc=0x1d01027a) returned 1 [0059.142] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x14cae0 | out: lpmi=0x14cae0) returned 1 [0059.143] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.143] AdjustWindowRectEx (in: lpRect=0x14cb70, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x14cb70) returned 1 [0059.143] GetCursorPos (in: lpPoint=0x218cb28 | out: lpPoint=0x218cb28*(x=781, y=505)) returned 1 [0059.143] MonitorFromPoint (pt=0x1fb0000030b, dwFlags=0x2) returned 0x10001 [0059.143] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x14c920 | out: lpmi=0x14c920) returned 1 [0059.143] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x1e01027a [0059.143] GetDeviceCaps (hdc=0x1e01027a, index=12) returned 32 [0059.143] GetDeviceCaps (hdc=0x1e01027a, index=14) returned 1 [0059.143] DeleteDC (hdc=0x1e01027a) returned 1 [0059.143] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x14c9f0 | out: lpmi=0x14c9f0) returned 1 [0059.143] AdjustWindowRectEx (in: lpRect=0x14ccf0, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x14ccf0) returned 1 [0059.143] GetSystemMetrics (nIndex=34) returned 132 [0059.143] GetSystemMetrics (nIndex=35) returned 38 [0059.143] MonitorFromRect (lprc=0x14cc68, dwFlags=0x2) returned 0x10001 [0059.143] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x14ca80 | out: lpmi=0x14ca80) returned 1 [0059.143] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x1f01027a [0059.144] GetDeviceCaps (hdc=0x1f01027a, index=12) returned 32 [0059.144] GetDeviceCaps (hdc=0x1f01027a, index=14) returned 1 [0059.144] DeleteDC (hdc=0x1f01027a) returned 1 [0059.144] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x14cae0 | out: lpmi=0x14cae0) returned 1 [0059.144] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.144] AdjustWindowRectEx (in: lpRect=0x14cf10, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14cf10) returned 1 [0059.144] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.144] AdjustWindowRectEx (in: lpRect=0x14cd60, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14cd60) returned 1 [0059.144] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.144] AdjustWindowRectEx (in: lpRect=0x14cf10, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14cf10) returned 1 [0059.145] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.145] AdjustWindowRectEx (in: lpRect=0x14cd60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14cd60) returned 1 [0059.145] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.145] AdjustWindowRectEx (in: lpRect=0x14cb08, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14cb08) returned 1 [0059.145] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.145] AdjustWindowRectEx (in: lpRect=0x14cf10, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14cf10) returned 1 [0059.145] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.145] AdjustWindowRectEx (in: lpRect=0x14cd60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14cd60) returned 1 [0059.145] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.145] AdjustWindowRectEx (in: lpRect=0x14cb08, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14cb08) returned 1 [0059.145] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.146] AdjustWindowRectEx (in: lpRect=0x14cf10, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14cf10) returned 1 [0059.146] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.146] AdjustWindowRectEx (in: lpRect=0x14cd60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14cd60) returned 1 [0059.146] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.146] AdjustWindowRectEx (in: lpRect=0x14cb08, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14cb08) returned 1 [0059.146] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.146] AdjustWindowRectEx (in: lpRect=0x14cf10, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14cf10) returned 1 [0059.146] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.146] AdjustWindowRectEx (in: lpRect=0x14cd60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14cd60) returned 1 [0059.146] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.146] AdjustWindowRectEx (in: lpRect=0x14cb08, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14cb08) returned 1 [0059.147] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.147] AdjustWindowRectEx (in: lpRect=0x14cf10, dwStyle=0x5e0100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14cf10) returned 1 [0059.147] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.147] AdjustWindowRectEx (in: lpRect=0x14cd60, dwStyle=0x5e0100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14cd60) returned 1 [0059.147] GetSystemMetrics (nIndex=5) returned 1 [0059.147] GetSystemMetrics (nIndex=6) returned 1 [0059.147] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.147] AdjustWindowRectEx (in: lpRect=0x14cf10, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14cf10) returned 1 [0059.147] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.147] AdjustWindowRectEx (in: lpRect=0x14cd60, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14cd60) returned 1 [0059.147] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.147] AdjustWindowRectEx (in: lpRect=0x14cf10, dwStyle=0x5e010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14cf10) returned 1 [0059.147] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.147] AdjustWindowRectEx (in: lpRect=0x14cd60, dwStyle=0x5e010044, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14cd60) returned 1 [0059.147] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.147] AdjustWindowRectEx (in: lpRect=0x14cf10, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14cf10) returned 1 [0059.148] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.148] AdjustWindowRectEx (in: lpRect=0x14cd60, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14cd60) returned 1 [0059.148] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.148] AdjustWindowRectEx (in: lpRect=0x14cb08, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14cb08) returned 1 [0059.148] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.148] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0059.148] SelectObject (hdc=0x8010893, h=0xb0a087e) returned 0x160a0258 [0059.148] DrawTextExW (in: hdc=0x8010893, lpchText="1 Files\r\nEncrypted", cchText=18, lprc=0x14dd18, format=0x2400, lpdtp=0x218d5e0 | out: lpchText="1 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0059.149] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.149] AdjustWindowRectEx (in: lpRect=0x14de18, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14de18) returned 1 [0059.149] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.149] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.149] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.149] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.149] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.149] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.149] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3Y0Y64F.pptx", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3Y0Y64F.pptx", lpFilePart=0x0) returned 0x34 [0059.149] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0059.149] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3Y0Y64F.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3y0y64f.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.149] GetFileType (hFile=0x270) returned 0x1 [0059.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0059.149] GetFileType (hFile=0x270) returned 0x1 [0059.149] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x6dba [0059.150] ReadFile (in: hFile=0x270, lpBuffer=0x218da88, nNumberOfBytesToRead=0x6dba, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x218da88*, lpNumberOfBytesRead=0x14df78*=0x6dba, lpOverlapped=0x0) returned 1 [0059.151] CloseHandle (hObject=0x270) returned 1 [0059.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3Y0Y64F.pptx", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3Y0Y64F.pptx", lpFilePart=0x0) returned 0x34 [0059.152] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3Y0Y64F.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3y0y64f.pptx")) returned 1 [0059.154] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3Y0Y64F.pptx.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3Y0Y64F.pptx.sad", lpFilePart=0x0) returned 0x38 [0059.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0059.154] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\3Y0Y64F.pptx.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\3y0y64f.pptx.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.154] GetFileType (hFile=0x270) returned 0x1 [0059.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0059.154] GetFileType (hFile=0x270) returned 0x1 [0059.155] WriteFile (in: hFile=0x270, lpBuffer=0x21a84d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21a84d8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.156] WriteFile (in: hFile=0x270, lpBuffer=0x21a84d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21a84d8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.156] WriteFile (in: hFile=0x270, lpBuffer=0x21a84d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21a84d8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.156] WriteFile (in: hFile=0x270, lpBuffer=0x21a84d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21a84d8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.157] WriteFile (in: hFile=0x270, lpBuffer=0x21a84d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21a84d8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.157] WriteFile (in: hFile=0x270, lpBuffer=0x21a84d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21a84d8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.157] WriteFile (in: hFile=0x270, lpBuffer=0x21a84d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21a84d8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.158] WriteFile (in: hFile=0x270, lpBuffer=0x21a84d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21a84d8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.158] WriteFile (in: hFile=0x270, lpBuffer=0x21a84d8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14de58, lpOverlapped=0x0 | out: lpBuffer=0x21a84d8*, lpNumberOfBytesWritten=0x14de58*=0x1000, lpOverlapped=0x0) returned 1 [0059.158] WriteFile (in: hFile=0x270, lpBuffer=0x21a84d8*, nNumberOfBytesToWrite=0x250, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x21a84d8*, lpNumberOfBytesWritten=0x14de38*=0x250, lpOverlapped=0x0) returned 1 [0059.159] CloseHandle (hObject=0x270) returned 1 [0059.160] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.160] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.162] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.162] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0059.162] DrawTextExW (in: hdc=0x8010893, lpchText="2 Files\r\nEncrypted", cchText=18, lprc=0x14dd18, format=0x2400, lpdtp=0x21a96f0 | out: lpchText="2 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0059.162] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.162] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.162] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.162] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.162] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.162] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.162] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\89ijGtgzr5-n8.docx", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\89ijGtgzr5-n8.docx", lpFilePart=0x0) returned 0x3a [0059.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0059.162] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\89ijGtgzr5-n8.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\89ijgtgzr5-n8.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.163] GetFileType (hFile=0x270) returned 0x1 [0059.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0059.163] GetFileType (hFile=0x270) returned 0x1 [0059.163] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x10a31 [0059.164] ReadFile (in: hFile=0x270, lpBuffer=0x21a9b30, nNumberOfBytesToRead=0x10a31, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x21a9b30*, lpNumberOfBytesRead=0x14df78*=0x10a31, lpOverlapped=0x0) returned 1 [0059.165] CloseHandle (hObject=0x270) returned 1 [0059.168] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\89ijGtgzr5-n8.docx", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\89ijGtgzr5-n8.docx", lpFilePart=0x0) returned 0x3a [0059.168] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\89ijGtgzr5-n8.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\89ijgtgzr5-n8.docx")) returned 1 [0059.170] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\89ijGtgzr5-n8.docx.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\89ijGtgzr5-n8.docx.sad", lpFilePart=0x0) returned 0x3e [0059.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0059.170] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\89ijGtgzr5-n8.docx.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\89ijgtgzr5-n8.docx.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.171] GetFileType (hFile=0x270) returned 0x1 [0059.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0059.171] GetFileType (hFile=0x270) returned 0x1 [0059.171] WriteFile (in: hFile=0x270, lpBuffer=0x21bbd58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21bbd58*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.172] WriteFile (in: hFile=0x270, lpBuffer=0x21bbd58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21bbd58*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.173] WriteFile (in: hFile=0x270, lpBuffer=0x21bbd58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21bbd58*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.173] WriteFile (in: hFile=0x270, lpBuffer=0x21bbd58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21bbd58*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.173] WriteFile (in: hFile=0x270, lpBuffer=0x21bbd58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21bbd58*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.174] WriteFile (in: hFile=0x270, lpBuffer=0x21bbd58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21bbd58*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.174] WriteFile (in: hFile=0x270, lpBuffer=0x21bbd58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21bbd58*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.174] WriteFile (in: hFile=0x270, lpBuffer=0x21bbd58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21bbd58*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.175] WriteFile (in: hFile=0x270, lpBuffer=0x21bbd58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21bbd58*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.175] WriteFile (in: hFile=0x270, lpBuffer=0x21bbd58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21bbd58*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.175] WriteFile (in: hFile=0x270, lpBuffer=0x21bbd58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21bbd58*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.176] WriteFile (in: hFile=0x270, lpBuffer=0x21bbd58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21bbd58*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.176] WriteFile (in: hFile=0x270, lpBuffer=0x21bbd58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21bbd58*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.176] WriteFile (in: hFile=0x270, lpBuffer=0x21bbd58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21bbd58*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.177] WriteFile (in: hFile=0x270, lpBuffer=0x21bbd58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21bbd58*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.177] WriteFile (in: hFile=0x270, lpBuffer=0x21bbd58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21bbd58*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.177] WriteFile (in: hFile=0x270, lpBuffer=0x21bbd58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21bbd58*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.178] WriteFile (in: hFile=0x270, lpBuffer=0x21bbd58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21bbd58*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.178] WriteFile (in: hFile=0x270, lpBuffer=0x21bbd58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21bbd58*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.178] WriteFile (in: hFile=0x270, lpBuffer=0x21bbd58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21bbd58*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.179] WriteFile (in: hFile=0x270, lpBuffer=0x21bbd58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21bbd58*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.179] WriteFile (in: hFile=0x270, lpBuffer=0x21bbd58*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14de58, lpOverlapped=0x0 | out: lpBuffer=0x21bbd58*, lpNumberOfBytesWritten=0x14de58*=0x1000, lpOverlapped=0x0) returned 1 [0059.179] WriteFile (in: hFile=0x270, lpBuffer=0x21bbd58*, nNumberOfBytesToWrite=0x2ec, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x21bbd58*, lpNumberOfBytesWritten=0x14de38*=0x2ec, lpOverlapped=0x0) returned 1 [0059.179] CloseHandle (hObject=0x270) returned 1 [0059.188] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.188] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.189] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.189] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0059.189] DrawTextExW (in: hdc=0x8010893, lpchText="3 Files\r\nEncrypted", cchText=18, lprc=0x14dd18, format=0x2400, lpdtp=0x21bcf48 | out: lpchText="3 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0059.189] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.189] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.189] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.189] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.189] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.189] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.189] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9PeM.pptx", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9PeM.pptx", lpFilePart=0x0) returned 0x31 [0059.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0059.189] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9PeM.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\9pem.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.190] GetFileType (hFile=0x270) returned 0x1 [0059.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0059.190] GetFileType (hFile=0x270) returned 0x1 [0059.190] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x10144 [0059.190] ReadFile (in: hFile=0x270, lpBuffer=0x21bd358, nNumberOfBytesToRead=0x10144, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x21bd358*, lpNumberOfBytesRead=0x14df78*=0x10144, lpOverlapped=0x0) returned 1 [0059.191] CloseHandle (hObject=0x270) returned 1 [0059.194] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9PeM.pptx", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9PeM.pptx", lpFilePart=0x0) returned 0x31 [0059.194] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9PeM.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\9pem.pptx")) returned 1 [0059.196] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9PeM.pptx.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9PeM.pptx.sad", lpFilePart=0x0) returned 0x35 [0059.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0059.196] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\9PeM.pptx.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\9pem.pptx.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.197] GetFileType (hFile=0x270) returned 0x1 [0059.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0059.197] GetFileType (hFile=0x270) returned 0x1 [0059.197] WriteFile (in: hFile=0x270, lpBuffer=0x21cec50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21cec50*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.198] WriteFile (in: hFile=0x270, lpBuffer=0x21cec50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21cec50*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.199] WriteFile (in: hFile=0x270, lpBuffer=0x21cec50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21cec50*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.199] WriteFile (in: hFile=0x270, lpBuffer=0x21cec50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21cec50*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.199] WriteFile (in: hFile=0x270, lpBuffer=0x21cec50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21cec50*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.200] WriteFile (in: hFile=0x270, lpBuffer=0x21cec50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21cec50*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.200] WriteFile (in: hFile=0x270, lpBuffer=0x21cec50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21cec50*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.200] WriteFile (in: hFile=0x270, lpBuffer=0x21cec50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21cec50*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.201] WriteFile (in: hFile=0x270, lpBuffer=0x21cec50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21cec50*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.201] WriteFile (in: hFile=0x270, lpBuffer=0x21cec50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21cec50*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.202] WriteFile (in: hFile=0x270, lpBuffer=0x21cec50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21cec50*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.202] WriteFile (in: hFile=0x270, lpBuffer=0x21cec50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21cec50*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.202] WriteFile (in: hFile=0x270, lpBuffer=0x21cec50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21cec50*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.203] WriteFile (in: hFile=0x270, lpBuffer=0x21cec50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21cec50*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.203] WriteFile (in: hFile=0x270, lpBuffer=0x21cec50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21cec50*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.203] WriteFile (in: hFile=0x270, lpBuffer=0x21cec50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21cec50*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.203] WriteFile (in: hFile=0x270, lpBuffer=0x21cec50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21cec50*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.204] WriteFile (in: hFile=0x270, lpBuffer=0x21cec50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21cec50*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.204] WriteFile (in: hFile=0x270, lpBuffer=0x21cec50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21cec50*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.205] WriteFile (in: hFile=0x270, lpBuffer=0x21cec50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21cec50*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.205] WriteFile (in: hFile=0x270, lpBuffer=0x21cec50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21cec50*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.205] WriteFile (in: hFile=0x270, lpBuffer=0x21cec50*, nNumberOfBytesToWrite=0x708, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x21cec50*, lpNumberOfBytesWritten=0x14de38*=0x708, lpOverlapped=0x0) returned 1 [0059.205] CloseHandle (hObject=0x270) returned 1 [0059.208] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.208] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.209] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.209] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0059.209] DrawTextExW (in: hdc=0x8010893, lpchText="4 Files\r\nEncrypted", cchText=18, lprc=0x14dd18, format=0x2400, lpdtp=0x21cfe40 | out: lpchText="4 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0059.209] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.209] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.209] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.209] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.209] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.209] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.209] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\d9NnY.pptx", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\d9NnY.pptx", lpFilePart=0x0) returned 0x32 [0059.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0059.209] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\d9NnY.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\d9nny.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.210] GetFileType (hFile=0x270) returned 0x1 [0059.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0059.210] GetFileType (hFile=0x270) returned 0x1 [0059.210] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x92fa [0059.210] ReadFile (in: hFile=0x270, lpBuffer=0x21d0250, nNumberOfBytesToRead=0x92fa, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x21d0250*, lpNumberOfBytesRead=0x14df78*=0x92fa, lpOverlapped=0x0) returned 1 [0059.211] CloseHandle (hObject=0x270) returned 1 [0059.213] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\d9NnY.pptx", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\d9NnY.pptx", lpFilePart=0x0) returned 0x32 [0059.213] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\d9NnY.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\d9nny.pptx")) returned 1 [0059.215] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\d9NnY.pptx.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\d9NnY.pptx.sad", lpFilePart=0x0) returned 0x36 [0059.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0059.215] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\d9NnY.pptx.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\d9nny.pptx.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.215] GetFileType (hFile=0x270) returned 0x1 [0059.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0059.215] GetFileType (hFile=0x270) returned 0x1 [0059.216] WriteFile (in: hFile=0x270, lpBuffer=0x21dad00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21dad00*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.217] WriteFile (in: hFile=0x270, lpBuffer=0x21dad00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21dad00*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.217] WriteFile (in: hFile=0x270, lpBuffer=0x21dad00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21dad00*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.218] WriteFile (in: hFile=0x270, lpBuffer=0x21dad00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21dad00*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.218] WriteFile (in: hFile=0x270, lpBuffer=0x21dad00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21dad00*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.218] WriteFile (in: hFile=0x270, lpBuffer=0x21dad00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21dad00*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.221] WriteFile (in: hFile=0x270, lpBuffer=0x21dad00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21dad00*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.221] WriteFile (in: hFile=0x270, lpBuffer=0x21dad00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21dad00*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.221] WriteFile (in: hFile=0x270, lpBuffer=0x21dad00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21dad00*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.222] WriteFile (in: hFile=0x270, lpBuffer=0x21dad00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21dad00*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.222] WriteFile (in: hFile=0x270, lpBuffer=0x21dad00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21dad00*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.222] WriteFile (in: hFile=0x270, lpBuffer=0x21dad00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14de58, lpOverlapped=0x0 | out: lpBuffer=0x21dad00*, lpNumberOfBytesWritten=0x14de58*=0x1000, lpOverlapped=0x0) returned 1 [0059.223] WriteFile (in: hFile=0x270, lpBuffer=0x21dad00*, nNumberOfBytesToWrite=0x3f8, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x21dad00*, lpNumberOfBytesWritten=0x14de38*=0x3f8, lpOverlapped=0x0) returned 1 [0059.223] CloseHandle (hObject=0x270) returned 1 [0059.230] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.230] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.230] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.230] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0059.231] DrawTextExW (in: hdc=0x8010893, lpchText="5 Files\r\nEncrypted", cchText=18, lprc=0x14dd18, format=0x2400, lpdtp=0x21dbef0 | out: lpchText="5 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0059.231] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.231] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.231] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.231] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.231] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.231] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.231] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x33 [0059.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0059.231] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.231] GetFileType (hFile=0x270) returned 0x1 [0059.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0059.231] GetFileType (hFile=0x270) returned 0x1 [0059.231] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x192 [0059.231] ReadFile (in: hFile=0x270, lpBuffer=0x21dc4b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x21dc4b0*, lpNumberOfBytesRead=0x14df78*=0x192, lpOverlapped=0x0) returned 1 [0059.232] CloseHandle (hObject=0x270) returned 1 [0059.233] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini", lpFilePart=0x0) returned 0x33 [0059.233] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\desktop.ini")) returned 1 [0059.234] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini.sad", lpFilePart=0x0) returned 0x37 [0059.234] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0059.234] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\desktop.ini.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.234] GetFileType (hFile=0x270) returned 0x1 [0059.234] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0059.234] GetFileType (hFile=0x270) returned 0x1 [0059.234] WriteFile (in: hFile=0x270, lpBuffer=0x21df0b0*, nNumberOfBytesToWrite=0x218, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x21df0b0*, lpNumberOfBytesWritten=0x14de38*=0x218, lpOverlapped=0x0) returned 1 [0059.235] CloseHandle (hObject=0x270) returned 1 [0059.236] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.236] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.237] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.237] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0059.237] DrawTextExW (in: hdc=0x8010893, lpchText="6 Files\r\nEncrypted", cchText=18, lprc=0x14dd18, format=0x2400, lpdtp=0x21e02a0 | out: lpchText="6 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0059.237] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.237] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.237] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.237] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.237] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.237] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.237] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\dQj1o0Dohm.docx", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\dQj1o0Dohm.docx", lpFilePart=0x0) returned 0x37 [0059.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0059.237] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\dQj1o0Dohm.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dqj1o0dohm.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.237] GetFileType (hFile=0x270) returned 0x1 [0059.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0059.237] GetFileType (hFile=0x270) returned 0x1 [0059.237] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0xd059 [0059.238] ReadFile (in: hFile=0x270, lpBuffer=0x21e06c8, nNumberOfBytesToRead=0xd059, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x21e06c8*, lpNumberOfBytesRead=0x14df78*=0xd059, lpOverlapped=0x0) returned 1 [0059.239] CloseHandle (hObject=0x270) returned 1 [0059.241] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\dQj1o0Dohm.docx", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\dQj1o0Dohm.docx", lpFilePart=0x0) returned 0x37 [0059.241] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\dQj1o0Dohm.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dqj1o0dohm.docx")) returned 1 [0059.243] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\dQj1o0Dohm.docx.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\dQj1o0Dohm.docx.sad", lpFilePart=0x0) returned 0x3b [0059.243] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0059.243] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\dQj1o0Dohm.docx.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\dqj1o0dohm.docx.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.244] GetFileType (hFile=0x270) returned 0x1 [0059.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0059.244] GetFileType (hFile=0x270) returned 0x1 [0059.244] WriteFile (in: hFile=0x270, lpBuffer=0x21eeef8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21eeef8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.245] WriteFile (in: hFile=0x270, lpBuffer=0x21eeef8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21eeef8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.246] WriteFile (in: hFile=0x270, lpBuffer=0x21eeef8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21eeef8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.246] WriteFile (in: hFile=0x270, lpBuffer=0x21eeef8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21eeef8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.246] WriteFile (in: hFile=0x270, lpBuffer=0x21eeef8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21eeef8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.247] WriteFile (in: hFile=0x270, lpBuffer=0x21eeef8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21eeef8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.247] WriteFile (in: hFile=0x270, lpBuffer=0x21eeef8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21eeef8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.247] WriteFile (in: hFile=0x270, lpBuffer=0x21eeef8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21eeef8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.247] WriteFile (in: hFile=0x270, lpBuffer=0x21eeef8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21eeef8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.248] WriteFile (in: hFile=0x270, lpBuffer=0x21eeef8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21eeef8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.253] WriteFile (in: hFile=0x270, lpBuffer=0x21eeef8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21eeef8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.253] WriteFile (in: hFile=0x270, lpBuffer=0x21eeef8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21eeef8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.253] WriteFile (in: hFile=0x270, lpBuffer=0x21eeef8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21eeef8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.254] WriteFile (in: hFile=0x270, lpBuffer=0x21eeef8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21eeef8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.254] WriteFile (in: hFile=0x270, lpBuffer=0x21eeef8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21eeef8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.254] WriteFile (in: hFile=0x270, lpBuffer=0x21eeef8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21eeef8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.254] WriteFile (in: hFile=0x270, lpBuffer=0x21eeef8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21eeef8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.254] WriteFile (in: hFile=0x270, lpBuffer=0x21eeef8*, nNumberOfBytesToWrite=0x5cc, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x21eeef8*, lpNumberOfBytesWritten=0x14de38*=0x5cc, lpOverlapped=0x0) returned 1 [0059.254] CloseHandle (hObject=0x270) returned 1 [0059.256] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.256] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.257] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.257] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0059.257] DrawTextExW (in: hdc=0x8010893, lpchText="7 Files\r\nEncrypted", cchText=18, lprc=0x14dd18, format=0x2400, lpdtp=0x21f00e8 | out: lpchText="7 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0059.257] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.257] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.257] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.257] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.257] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.257] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.257] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Gc3 w969xZhWSc.xlsx", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Gc3 w969xZhWSc.xlsx", lpFilePart=0x0) returned 0x3b [0059.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0059.257] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Gc3 w969xZhWSc.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gc3 w969xzhwsc.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.257] GetFileType (hFile=0x270) returned 0x1 [0059.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0059.257] GetFileType (hFile=0x270) returned 0x1 [0059.258] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x108e6 [0059.258] ReadFile (in: hFile=0x270, lpBuffer=0x21f0528, nNumberOfBytesToRead=0x108e6, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x21f0528*, lpNumberOfBytesRead=0x14df78*=0x108e6, lpOverlapped=0x0) returned 1 [0059.259] CloseHandle (hObject=0x270) returned 1 [0059.262] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Gc3 w969xZhWSc.xlsx", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Gc3 w969xZhWSc.xlsx", lpFilePart=0x0) returned 0x3b [0059.262] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Gc3 w969xZhWSc.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gc3 w969xzhwsc.xlsx")) returned 1 [0059.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Gc3 w969xZhWSc.xlsx.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Gc3 w969xZhWSc.xlsx.sad", lpFilePart=0x0) returned 0x3f [0059.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0059.264] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Gc3 w969xZhWSc.xlsx.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gc3 w969xzhwsc.xlsx.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.265] GetFileType (hFile=0x270) returned 0x1 [0059.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0059.265] GetFileType (hFile=0x270) returned 0x1 [0059.265] WriteFile (in: hFile=0x270, lpBuffer=0x2202600*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2202600*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.266] WriteFile (in: hFile=0x270, lpBuffer=0x2202600*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2202600*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.266] WriteFile (in: hFile=0x270, lpBuffer=0x2202600*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2202600*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.267] WriteFile (in: hFile=0x270, lpBuffer=0x2202600*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2202600*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.267] WriteFile (in: hFile=0x270, lpBuffer=0x2202600*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2202600*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.267] WriteFile (in: hFile=0x270, lpBuffer=0x2202600*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2202600*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.267] WriteFile (in: hFile=0x270, lpBuffer=0x2202600*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2202600*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.267] WriteFile (in: hFile=0x270, lpBuffer=0x2202600*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2202600*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.267] WriteFile (in: hFile=0x270, lpBuffer=0x2202600*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2202600*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.268] WriteFile (in: hFile=0x270, lpBuffer=0x2202600*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2202600*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.268] WriteFile (in: hFile=0x270, lpBuffer=0x2202600*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2202600*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.268] WriteFile (in: hFile=0x270, lpBuffer=0x2202600*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2202600*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.268] WriteFile (in: hFile=0x270, lpBuffer=0x2202600*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2202600*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.268] WriteFile (in: hFile=0x270, lpBuffer=0x2202600*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2202600*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.269] WriteFile (in: hFile=0x270, lpBuffer=0x2202600*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2202600*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.269] WriteFile (in: hFile=0x270, lpBuffer=0x2202600*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2202600*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.269] WriteFile (in: hFile=0x270, lpBuffer=0x2202600*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2202600*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.269] WriteFile (in: hFile=0x270, lpBuffer=0x2202600*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2202600*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.269] WriteFile (in: hFile=0x270, lpBuffer=0x2202600*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2202600*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.270] WriteFile (in: hFile=0x270, lpBuffer=0x2202600*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2202600*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.270] WriteFile (in: hFile=0x270, lpBuffer=0x2202600*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2202600*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0059.270] WriteFile (in: hFile=0x270, lpBuffer=0x2202600*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14de58, lpOverlapped=0x0 | out: lpBuffer=0x2202600*, lpNumberOfBytesWritten=0x14de58*=0x1000, lpOverlapped=0x0) returned 1 [0059.270] WriteFile (in: hFile=0x270, lpBuffer=0x2202600*, nNumberOfBytesToWrite=0x134, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x2202600*, lpNumberOfBytesWritten=0x14de38*=0x134, lpOverlapped=0x0) returned 1 [0059.270] CloseHandle (hObject=0x270) returned 1 [0059.276] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.277] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.277] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.277] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0059.277] DrawTextExW (in: hdc=0x8010893, lpchText="8 Files\r\nEncrypted", cchText=18, lprc=0x14dd18, format=0x2400, lpdtp=0x22037f0 | out: lpchText="8 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0059.280] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.280] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.280] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.280] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.280] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.280] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.280] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hU4C G6tvi-0kSc2zHT.xlsx", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hU4C G6tvi-0kSc2zHT.xlsx", lpFilePart=0x0) returned 0x40 [0059.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0059.280] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hU4C G6tvi-0kSc2zHT.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hu4c g6tvi-0ksc2zht.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.281] GetFileType (hFile=0x270) returned 0x1 [0059.281] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0059.281] GetFileType (hFile=0x270) returned 0x1 [0059.281] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x15186 [0059.281] ReadFile (in: hFile=0x270, lpBuffer=0x12200480, nNumberOfBytesToRead=0x15186, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x12200480*, lpNumberOfBytesRead=0x14df78*=0x15186, lpOverlapped=0x0) returned 1 [0059.283] CloseHandle (hObject=0x270) returned 1 [0059.286] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hU4C G6tvi-0kSc2zHT.xlsx", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hU4C G6tvi-0kSc2zHT.xlsx", lpFilePart=0x0) returned 0x40 [0059.286] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hU4C G6tvi-0kSc2zHT.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hu4c g6tvi-0ksc2zht.xlsx")) returned 1 [0059.288] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hU4C G6tvi-0kSc2zHT.xlsx.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hU4C G6tvi-0kSc2zHT.xlsx.sad", lpFilePart=0x0) returned 0x44 [0059.288] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0059.288] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\hU4C G6tvi-0kSc2zHT.xlsx.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hu4c g6tvi-0ksc2zht.xlsx.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0059.294] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.294] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.294] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.294] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0059.294] DrawTextExW (in: hdc=0x8010893, lpchText="9 Files\r\nEncrypted", cchText=18, lprc=0x14dd18, format=0x2400, lpdtp=0x2206668 | out: lpchText="9 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0059.294] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.294] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.294] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.294] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.294] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.294] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.294] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HYWzxkG0Uz1nGSf M o.pps", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HYWzxkG0Uz1nGSf M o.pps", lpFilePart=0x0) returned 0x3f [0059.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0059.295] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HYWzxkG0Uz1nGSf M o.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hywzxkg0uz1ngsf m o.pps"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0059.295] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x96d8 [0059.295] ReadFile (in: hFile=0x270, lpBuffer=0x2206ac0, nNumberOfBytesToRead=0x96d8, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x2206ac0*, lpNumberOfBytesRead=0x14df78*=0x96d8, lpOverlapped=0x0) returned 1 [0059.297] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HYWzxkG0Uz1nGSf M o.pps", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HYWzxkG0Uz1nGSf M o.pps", lpFilePart=0x0) returned 0x3f [0059.297] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HYWzxkG0Uz1nGSf M o.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hywzxkg0uz1ngsf m o.pps")) returned 1 [0059.299] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HYWzxkG0Uz1nGSf M o.pps.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HYWzxkG0Uz1nGSf M o.pps.sad", lpFilePart=0x0) returned 0x43 [0059.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0059.299] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HYWzxkG0Uz1nGSf M o.pps.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hywzxkg0uz1ngsf m o.pps.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0059.302] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.302] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.302] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.302] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0059.302] DrawTextExW (in: hdc=0x8010893, lpchText="10 Files\r\nEncrypted", cchText=19, lprc=0x14dd18, format=0x2400, lpdtp=0x2212ba0 | out: lpchText="10 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0059.302] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.302] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.302] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.302] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.302] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.302] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\LX3QPPhOF6.pptx", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\LX3QPPhOF6.pptx", lpFilePart=0x0) returned 0x37 [0059.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0059.303] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\LX3QPPhOF6.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\lx3qpphof6.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0059.303] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x6538 [0059.303] ReadFile (in: hFile=0x270, lpBuffer=0x2212fc8, nNumberOfBytesToRead=0x6538, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x2212fc8*, lpNumberOfBytesRead=0x14df78*=0x6538, lpOverlapped=0x0) returned 1 [0059.305] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\LX3QPPhOF6.pptx", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\LX3QPPhOF6.pptx", lpFilePart=0x0) returned 0x37 [0059.305] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\LX3QPPhOF6.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\lx3qpphof6.pptx")) returned 1 [0059.306] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\LX3QPPhOF6.pptx.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\LX3QPPhOF6.pptx.sad", lpFilePart=0x0) returned 0x3b [0059.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0059.306] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\LX3QPPhOF6.pptx.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\lx3qpphof6.pptx.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0059.308] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.308] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.309] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.309] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0059.309] DrawTextExW (in: hdc=0x8010893, lpchText="11 Files\r\nEncrypted", cchText=19, lprc=0x14dd18, format=0x2400, lpdtp=0x222ccd8 | out: lpchText="11 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0059.309] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.309] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.309] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.309] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.309] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.309] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.309] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m_92-z5v.xlsx", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m_92-z5v.xlsx", lpFilePart=0x0) returned 0x35 [0059.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0059.309] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m_92-z5v.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m_92-z5v.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0059.309] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0xf61e [0059.310] ReadFile (in: hFile=0x270, lpBuffer=0x222d100, nNumberOfBytesToRead=0xf61e, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x222d100*, lpNumberOfBytesRead=0x14df78*=0xf61e, lpOverlapped=0x0) returned 1 [0059.313] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m_92-z5v.xlsx", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m_92-z5v.xlsx", lpFilePart=0x0) returned 0x35 [0059.313] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m_92-z5v.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m_92-z5v.xlsx")) returned 1 [0059.315] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m_92-z5v.xlsx.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m_92-z5v.xlsx.sad", lpFilePart=0x0) returned 0x39 [0059.315] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0059.315] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m_92-z5v.xlsx.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m_92-z5v.xlsx.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.315] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0059.318] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.318] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.318] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.318] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0059.318] DrawTextExW (in: hdc=0x8010893, lpchText="12 Files\r\nEncrypted", cchText=19, lprc=0x14dd18, format=0x2400, lpdtp=0x223f0e8 | out: lpchText="12 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0059.318] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.318] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.318] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.318] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.318] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.318] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.318] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\nuynO1DX.xlsx", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\nuynO1DX.xlsx", lpFilePart=0x0) returned 0x35 [0059.318] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0059.318] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\nuynO1DX.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\nuyno1dx.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.319] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0059.319] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x15cc9 [0059.319] ReadFile (in: hFile=0x270, lpBuffer=0x1228fda0, nNumberOfBytesToRead=0x15cc9, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x1228fda0*, lpNumberOfBytesRead=0x14df78*=0x15cc9, lpOverlapped=0x0) returned 1 [0059.322] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\nuynO1DX.xlsx", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\nuynO1DX.xlsx", lpFilePart=0x0) returned 0x35 [0059.323] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\nuynO1DX.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\nuyno1dx.xlsx")) returned 1 [0059.324] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\nuynO1DX.xlsx.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\nuynO1DX.xlsx.sad", lpFilePart=0x0) returned 0x39 [0059.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0059.325] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\nuynO1DX.xlsx.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\nuyno1dx.xlsx.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0059.328] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.328] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.328] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.328] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0059.328] DrawTextExW (in: hdc=0x8010893, lpchText="13 Files\r\nEncrypted", cchText=19, lprc=0x14dd18, format=0x2400, lpdtp=0x2241ec0 | out: lpchText="13 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0059.329] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.329] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.329] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.329] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.329] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.329] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OoM3defXR4nF 5fpk.pptx", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OoM3defXR4nF 5fpk.pptx", lpFilePart=0x0) returned 0x3e [0059.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0059.329] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OoM3defXR4nF 5fpk.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oom3defxr4nf 5fpk.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0059.329] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0xac81 [0059.330] ReadFile (in: hFile=0x270, lpBuffer=0x2242318, nNumberOfBytesToRead=0xac81, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x2242318*, lpNumberOfBytesRead=0x14df78*=0xac81, lpOverlapped=0x0) returned 1 [0059.332] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OoM3defXR4nF 5fpk.pptx", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OoM3defXR4nF 5fpk.pptx", lpFilePart=0x0) returned 0x3e [0059.332] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OoM3defXR4nF 5fpk.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oom3defxr4nf 5fpk.pptx")) returned 1 [0059.334] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OoM3defXR4nF 5fpk.pptx.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OoM3defXR4nF 5fpk.pptx.sad", lpFilePart=0x0) returned 0x42 [0059.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0059.334] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OoM3defXR4nF 5fpk.pptx.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oom3defxr4nf 5fpk.pptx.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0059.336] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.336] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.336] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.336] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0059.336] DrawTextExW (in: hdc=0x8010893, lpchText="14 Files\r\nEncrypted", cchText=19, lprc=0x14dd18, format=0x2400, lpdtp=0x224f9a8 | out: lpchText="14 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0059.337] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.337] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.337] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.337] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.337] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.337] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.337] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OuA8o4U-WS3Q.pptx", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OuA8o4U-WS3Q.pptx", lpFilePart=0x0) returned 0x39 [0059.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0059.337] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OuA8o4U-WS3Q.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oua8o4u-ws3q.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0059.337] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x3247 [0059.338] ReadFile (in: hFile=0x270, lpBuffer=0x224fde8, nNumberOfBytesToRead=0x3247, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x224fde8*, lpNumberOfBytesRead=0x14df78*=0x3247, lpOverlapped=0x0) returned 1 [0059.339] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OuA8o4U-WS3Q.pptx", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OuA8o4U-WS3Q.pptx", lpFilePart=0x0) returned 0x39 [0059.339] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OuA8o4U-WS3Q.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oua8o4u-ws3q.pptx")) returned 1 [0059.340] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OuA8o4U-WS3Q.pptx.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OuA8o4U-WS3Q.pptx.sad", lpFilePart=0x0) returned 0x3d [0059.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0059.340] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\OuA8o4U-WS3Q.pptx.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\oua8o4u-ws3q.pptx.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0059.342] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.342] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.343] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.343] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0059.343] DrawTextExW (in: hdc=0x8010893, lpchText="15 Files\r\nEncrypted", cchText=19, lprc=0x14dd18, format=0x2400, lpdtp=0x225e050 | out: lpchText="15 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0059.343] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.343] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.343] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.343] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.343] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.343] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.343] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\PmBiipOAWT2b95.docx", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\PmBiipOAWT2b95.docx", lpFilePart=0x0) returned 0x3b [0059.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0059.343] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\PmBiipOAWT2b95.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pmbiipoawt2b95.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0059.343] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x134c [0059.344] ReadFile (in: hFile=0x270, lpBuffer=0x225e490, nNumberOfBytesToRead=0x134c, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x225e490*, lpNumberOfBytesRead=0x14df78*=0x134c, lpOverlapped=0x0) returned 1 [0059.345] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\PmBiipOAWT2b95.docx", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\PmBiipOAWT2b95.docx", lpFilePart=0x0) returned 0x3b [0059.345] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\PmBiipOAWT2b95.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pmbiipoawt2b95.docx")) returned 1 [0059.346] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\PmBiipOAWT2b95.docx.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\PmBiipOAWT2b95.docx.sad", lpFilePart=0x0) returned 0x3f [0059.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0059.347] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\PmBiipOAWT2b95.docx.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\pmbiipoawt2b95.docx.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0059.348] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.348] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.348] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.348] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0059.349] DrawTextExW (in: hdc=0x8010893, lpchText="16 Files\r\nEncrypted", cchText=19, lprc=0x14dd18, format=0x2400, lpdtp=0x2265560 | out: lpchText="16 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0059.349] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.349] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.349] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.349] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.349] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.349] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\QDzJdUSV4kgAL6AQi.xlsx", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\QDzJdUSV4kgAL6AQi.xlsx", lpFilePart=0x0) returned 0x3e [0059.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0059.349] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\QDzJdUSV4kgAL6AQi.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qdzjdusv4kgal6aqi.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0059.349] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0xa83 [0059.349] ReadFile (in: hFile=0x270, lpBuffer=0x2266458, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x2266458*, lpNumberOfBytesRead=0x14df78*=0xa83, lpOverlapped=0x0) returned 1 [0059.350] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\QDzJdUSV4kgAL6AQi.xlsx", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\QDzJdUSV4kgAL6AQi.xlsx", lpFilePart=0x0) returned 0x3e [0059.350] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\QDzJdUSV4kgAL6AQi.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qdzjdusv4kgal6aqi.xlsx")) returned 1 [0059.352] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\QDzJdUSV4kgAL6AQi.xlsx.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\QDzJdUSV4kgAL6AQi.xlsx.sad", lpFilePart=0x0) returned 0x42 [0059.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0059.352] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\QDzJdUSV4kgAL6AQi.xlsx.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\qdzjdusv4kgal6aqi.xlsx.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0059.354] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.354] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.354] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.354] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0059.354] DrawTextExW (in: hdc=0x8010893, lpchText="17 Files\r\nEncrypted", cchText=19, lprc=0x14dd18, format=0x2400, lpdtp=0x226ba88 | out: lpchText="17 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0059.354] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.354] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.354] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.354] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.354] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.354] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.354] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.355] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.355] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.355] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.355] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UI8uxC.ppt", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UI8uxC.ppt", lpFilePart=0x0) returned 0x32 [0059.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0059.355] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UI8uxC.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ui8uxc.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0059.355] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x5bfa [0059.355] ReadFile (in: hFile=0x270, lpBuffer=0x226c0a0, nNumberOfBytesToRead=0x5bfa, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x226c0a0*, lpNumberOfBytesRead=0x14df78*=0x5bfa, lpOverlapped=0x0) returned 1 [0059.357] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UI8uxC.ppt", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UI8uxC.ppt", lpFilePart=0x0) returned 0x32 [0059.357] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UI8uxC.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ui8uxc.ppt")) returned 1 [0059.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UI8uxC.ppt.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UI8uxC.ppt.sad", lpFilePart=0x0) returned 0x36 [0059.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0059.359] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UI8uxC.ppt.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ui8uxc.ppt.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0059.362] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.362] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.362] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.362] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0059.362] DrawTextExW (in: hdc=0x8010893, lpchText="18 Files\r\nEncrypted", cchText=19, lprc=0x14dd18, format=0x2400, lpdtp=0x2283bb0 | out: lpchText="18 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0059.362] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.362] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.362] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.362] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.362] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.362] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UlApawW8.docx", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UlApawW8.docx", lpFilePart=0x0) returned 0x35 [0059.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0059.363] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UlApawW8.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ulapaww8.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0059.363] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x129b8 [0059.364] ReadFile (in: hFile=0x270, lpBuffer=0x2283fd8, nNumberOfBytesToRead=0x129b8, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x2283fd8*, lpNumberOfBytesRead=0x14df78*=0x129b8, lpOverlapped=0x0) returned 1 [0059.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UlApawW8.docx", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UlApawW8.docx", lpFilePart=0x0) returned 0x35 [0059.366] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UlApawW8.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ulapaww8.docx")) returned 1 [0059.368] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UlApawW8.docx.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UlApawW8.docx.sad", lpFilePart=0x0) returned 0x39 [0059.368] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0059.368] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\UlApawW8.docx.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ulapaww8.docx.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.369] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0059.372] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.372] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.372] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.372] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0059.372] DrawTextExW (in: hdc=0x8010893, lpchText="19 Files\r\nEncrypted", cchText=19, lprc=0x14dd18, format=0x2400, lpdtp=0x2299358 | out: lpchText="19 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0059.372] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.372] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.372] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.372] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.372] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.372] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xikwfo.docx", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xikwfo.docx", lpFilePart=0x0) returned 0x33 [0059.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0059.373] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xikwfo.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xikwfo.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.373] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0059.373] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x186f3 [0059.373] ReadFile (in: hFile=0x270, lpBuffer=0x1232e378, nNumberOfBytesToRead=0x186f3, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x1232e378*, lpNumberOfBytesRead=0x14df78*=0x186f3, lpOverlapped=0x0) returned 1 [0059.377] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xikwfo.docx", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xikwfo.docx", lpFilePart=0x0) returned 0x33 [0059.377] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xikwfo.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xikwfo.docx")) returned 1 [0059.379] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xikwfo.docx.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xikwfo.docx.sad", lpFilePart=0x0) returned 0x37 [0059.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0059.379] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\xikwfo.docx.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\xikwfo.docx.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.380] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0059.383] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.383] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.383] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.383] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0059.383] DrawTextExW (in: hdc=0x8010893, lpchText="20 Files\r\nEncrypted", cchText=19, lprc=0x14dd18, format=0x2400, lpdtp=0x229c0f8 | out: lpchText="20 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0059.383] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.383] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.383] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.383] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.384] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.384] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.384] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\z0CsHAOv1NR222l7aeEa.docx", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\z0CsHAOv1NR222l7aeEa.docx", lpFilePart=0x0) returned 0x41 [0059.384] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0059.384] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\z0CsHAOv1NR222l7aeEa.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\z0cshaov1nr222l7aeea.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0059.384] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x16919 [0059.384] ReadFile (in: hFile=0x270, lpBuffer=0x12387d70, nNumberOfBytesToRead=0x16919, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x12387d70*, lpNumberOfBytesRead=0x14df78*=0x16919, lpOverlapped=0x0) returned 1 [0059.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\z0CsHAOv1NR222l7aeEa.docx", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\z0CsHAOv1NR222l7aeEa.docx", lpFilePart=0x0) returned 0x41 [0059.388] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\z0CsHAOv1NR222l7aeEa.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\z0cshaov1nr222l7aeea.docx")) returned 1 [0059.390] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\z0CsHAOv1NR222l7aeEa.docx.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\z0CsHAOv1NR222l7aeEa.docx.sad", lpFilePart=0x0) returned 0x45 [0059.390] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0059.390] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\z0CsHAOv1NR222l7aeEa.docx.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\z0cshaov1nr222l7aeea.docx.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.391] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0059.394] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.394] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.394] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.394] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0059.394] DrawTextExW (in: hdc=0x8010893, lpchText="21 Files\r\nEncrypted", cchText=19, lprc=0x14dd18, format=0x2400, lpdtp=0x229ef78 | out: lpchText="21 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0059.394] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.394] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.394] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.394] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.394] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.394] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.394] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZPXhCkEmcja7Cg1.odt", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZPXhCkEmcja7Cg1.odt", lpFilePart=0x0) returned 0x3b [0059.394] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0059.395] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZPXhCkEmcja7Cg1.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zpxhckemcja7cg1.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.395] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0059.395] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x13852 [0059.396] ReadFile (in: hFile=0x270, lpBuffer=0x229f3b8, nNumberOfBytesToRead=0x13852, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x229f3b8*, lpNumberOfBytesRead=0x14df78*=0x13852, lpOverlapped=0x0) returned 1 [0059.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZPXhCkEmcja7Cg1.odt", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZPXhCkEmcja7Cg1.odt", lpFilePart=0x0) returned 0x3b [0059.398] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZPXhCkEmcja7Cg1.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zpxhckemcja7cg1.odt")) returned 1 [0059.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZPXhCkEmcja7Cg1.odt.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZPXhCkEmcja7Cg1.odt.sad", lpFilePart=0x0) returned 0x3f [0059.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0059.400] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ZPXhCkEmcja7Cg1.odt.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\zpxhckemcja7cg1.odt.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0059.404] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0059.404] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0059.404] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.404] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0059.404] DrawTextExW (in: hdc=0x8010893, lpchText="22 Files\r\nEncrypted", cchText=19, lprc=0x14dd18, format=0x2400, lpdtp=0x22b55f8 | out: lpchText="22 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0059.405] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.405] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.405] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.405] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e190) returned 1 [0059.405] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", nBufferLength=0x105, lpBuffer=0x14dc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents", lpFilePart=0x0) returned 0x27 [0059.405] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\", nBufferLength=0x105, lpBuffer=0x14dc20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\", lpFilePart=0x0) returned 0x28 [0059.405] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x14de30 | out: lpFindFileData=0x14de30) returned 0xa748e0 [0059.406] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0059.406] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0059.407] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0059.407] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0059.407] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0059.407] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0059.407] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0059.407] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0059.408] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0059.408] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0059.408] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0059.408] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0059.408] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0059.408] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0059.409] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0059.409] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0059.409] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0059.409] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0059.409] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0059.409] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0059.410] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0059.410] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0059.410] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0059.410] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0059.410] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0059.410] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0059.411] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0059.411] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0059.411] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0059.411] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0059.411] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 0 [0059.411] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0059.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e0e0) returned 1 [0059.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e0a0) returned 1 [0059.412] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.412] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.412] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0059.412] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0059.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14d9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x48 [0059.412] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dea0) returned 1 [0059.412] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.415] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de10) returned 1 [0059.415] WriteFile (in: hFile=0x270, lpBuffer=0x22bb050*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x14dee8, lpOverlapped=0x0 | out: lpBuffer=0x22bb050*, lpNumberOfBytesWritten=0x14dee8*=0x119, lpOverlapped=0x0) returned 1 [0059.416] CloseHandle (hObject=0x270) returned 1 [0059.417] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0059.417] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0059.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e080) returned 1 [0059.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m", lpFilePart=0x0) returned 0x33 [0059.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\", nBufferLength=0x105, lpBuffer=0x14db10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\", lpFilePart=0x0) returned 0x34 [0059.417] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\*", lpFindFileData=0x14dd20 | out: lpFindFileData=0x14dd20) returned 0xa748e0 [0059.417] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0059.417] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0059.417] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0059.418] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0059.418] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0059.418] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0059.418] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0059.418] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0059.418] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0059.418] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0059.419] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 0 [0059.419] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0059.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dfd0) returned 1 [0059.419] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14df90) returned 1 [0059.419] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0059.419] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0059.419] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0059.419] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0059.419] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\8xxYVH79N5k8F.xlsx", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\8xxYVH79N5k8F.xlsx", lpFilePart=0x0) returned 0x46 [0059.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0059.420] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\8xxYVH79N5k8F.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\8xxyvh79n5k8f.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.420] GetFileType (hFile=0x270) returned 0x1 [0059.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0059.420] GetFileType (hFile=0x270) returned 0x1 [0059.420] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x14c2e [0059.420] ReadFile (in: hFile=0x270, lpBuffer=0x1240eb18, nNumberOfBytesToRead=0x14c2e, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x1240eb18*, lpNumberOfBytesRead=0x14de68*=0x14c2e, lpOverlapped=0x0) returned 1 [0059.422] CloseHandle (hObject=0x270) returned 1 [0059.503] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\8xxYVH79N5k8F.xlsx", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\8xxYVH79N5k8F.xlsx", lpFilePart=0x0) returned 0x46 [0059.503] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\8xxYVH79N5k8F.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\8xxyvh79n5k8f.xlsx")) returned 1 [0059.504] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\8xxYVH79N5k8F.xlsx.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\8xxYVH79N5k8F.xlsx.sad", lpFilePart=0x0) returned 0x4a [0059.504] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0059.504] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\8xxYVH79N5k8F.xlsx.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\8xxyvh79n5k8f.xlsx.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.505] GetFileType (hFile=0x270) returned 0x1 [0059.505] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0059.505] GetFileType (hFile=0x270) returned 0x1 [0059.505] WriteFile (in: hFile=0x270, lpBuffer=0x2132098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2132098*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.506] WriteFile (in: hFile=0x270, lpBuffer=0x2132098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2132098*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.506] WriteFile (in: hFile=0x270, lpBuffer=0x2132098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2132098*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.507] WriteFile (in: hFile=0x270, lpBuffer=0x2132098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2132098*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.507] WriteFile (in: hFile=0x270, lpBuffer=0x2132098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2132098*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.508] WriteFile (in: hFile=0x270, lpBuffer=0x2132098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2132098*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.508] WriteFile (in: hFile=0x270, lpBuffer=0x2132098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2132098*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.508] WriteFile (in: hFile=0x270, lpBuffer=0x2132098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2132098*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.508] WriteFile (in: hFile=0x270, lpBuffer=0x2132098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2132098*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.509] WriteFile (in: hFile=0x270, lpBuffer=0x2132098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2132098*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.509] WriteFile (in: hFile=0x270, lpBuffer=0x2132098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2132098*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.509] WriteFile (in: hFile=0x270, lpBuffer=0x2132098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2132098*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.509] WriteFile (in: hFile=0x270, lpBuffer=0x2132098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2132098*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.510] WriteFile (in: hFile=0x270, lpBuffer=0x2132098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2132098*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.510] WriteFile (in: hFile=0x270, lpBuffer=0x2132098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2132098*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.510] WriteFile (in: hFile=0x270, lpBuffer=0x2132098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2132098*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.511] WriteFile (in: hFile=0x270, lpBuffer=0x2132098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2132098*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.511] WriteFile (in: hFile=0x270, lpBuffer=0x2132098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2132098*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.511] WriteFile (in: hFile=0x270, lpBuffer=0x2132098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2132098*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.512] WriteFile (in: hFile=0x270, lpBuffer=0x2132098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2132098*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.512] WriteFile (in: hFile=0x270, lpBuffer=0x2132098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2132098*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.512] WriteFile (in: hFile=0x270, lpBuffer=0x2132098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2132098*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.513] WriteFile (in: hFile=0x270, lpBuffer=0x2132098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2132098*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.513] WriteFile (in: hFile=0x270, lpBuffer=0x2132098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2132098*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.514] WriteFile (in: hFile=0x270, lpBuffer=0x2132098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2132098*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.514] WriteFile (in: hFile=0x270, lpBuffer=0x2132098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2132098*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.514] WriteFile (in: hFile=0x270, lpBuffer=0x2132098*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2132098*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.515] WriteFile (in: hFile=0x270, lpBuffer=0x2132098*, nNumberOfBytesToWrite=0xae8, lpNumberOfBytesWritten=0x14dd28, lpOverlapped=0x0 | out: lpBuffer=0x2132098*, lpNumberOfBytesWritten=0x14dd28*=0xae8, lpOverlapped=0x0) returned 1 [0059.515] CloseHandle (hObject=0x270) returned 1 [0059.516] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0059.516] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0059.517] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.517] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0059.517] DrawTextExW (in: hdc=0x8010893, lpchText="23 Files\r\nEncrypted", cchText=19, lprc=0x14dc08, format=0x2400, lpdtp=0x2133290 | out: lpchText="23 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0059.517] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0059.517] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0059.517] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0059.517] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0059.517] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0059.517] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0059.517] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\dJ GNn.doc", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\dJ GNn.doc", lpFilePart=0x0) returned 0x3e [0059.517] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0059.517] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\dJ GNn.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\dj gnn.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.518] GetFileType (hFile=0x270) returned 0x1 [0059.518] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0059.518] GetFileType (hFile=0x270) returned 0x1 [0059.518] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0xbc8c [0059.518] ReadFile (in: hFile=0x270, lpBuffer=0x21336b8, nNumberOfBytesToRead=0xbc8c, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x21336b8*, lpNumberOfBytesRead=0x14de68*=0xbc8c, lpOverlapped=0x0) returned 1 [0059.519] CloseHandle (hObject=0x270) returned 1 [0059.519] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\dJ GNn.doc", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\dJ GNn.doc", lpFilePart=0x0) returned 0x3e [0059.519] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\dJ GNn.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\dj gnn.doc")) returned 1 [0059.521] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\dJ GNn.doc.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\dJ GNn.doc.sad", lpFilePart=0x0) returned 0x42 [0059.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0059.521] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\dJ GNn.doc.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\dj gnn.doc.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.521] GetFileType (hFile=0x270) returned 0x1 [0059.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0059.521] GetFileType (hFile=0x270) returned 0x1 [0059.522] WriteFile (in: hFile=0x270, lpBuffer=0x2140b40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2140b40*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.523] WriteFile (in: hFile=0x270, lpBuffer=0x2140b40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2140b40*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.523] WriteFile (in: hFile=0x270, lpBuffer=0x2140b40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2140b40*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.523] WriteFile (in: hFile=0x270, lpBuffer=0x2140b40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2140b40*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.524] WriteFile (in: hFile=0x270, lpBuffer=0x2140b40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2140b40*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.524] WriteFile (in: hFile=0x270, lpBuffer=0x2140b40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2140b40*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.525] WriteFile (in: hFile=0x270, lpBuffer=0x2140b40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2140b40*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.525] WriteFile (in: hFile=0x270, lpBuffer=0x2140b40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2140b40*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.525] WriteFile (in: hFile=0x270, lpBuffer=0x2140b40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2140b40*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.526] WriteFile (in: hFile=0x270, lpBuffer=0x2140b40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2140b40*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.526] WriteFile (in: hFile=0x270, lpBuffer=0x2140b40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2140b40*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.526] WriteFile (in: hFile=0x270, lpBuffer=0x2140b40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2140b40*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.527] WriteFile (in: hFile=0x270, lpBuffer=0x2140b40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2140b40*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.527] WriteFile (in: hFile=0x270, lpBuffer=0x2140b40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2140b40*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.527] WriteFile (in: hFile=0x270, lpBuffer=0x2140b40*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2140b40*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.528] WriteFile (in: hFile=0x270, lpBuffer=0x2140b40*, nNumberOfBytesToWrite=0xb68, lpNumberOfBytesWritten=0x14dd28, lpOverlapped=0x0 | out: lpBuffer=0x2140b40*, lpNumberOfBytesWritten=0x14dd28*=0xb68, lpOverlapped=0x0) returned 1 [0059.528] CloseHandle (hObject=0x270) returned 1 [0059.533] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0059.533] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0059.533] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.533] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0059.533] DrawTextExW (in: hdc=0x8010893, lpchText="24 Files\r\nEncrypted", cchText=19, lprc=0x14dc08, format=0x2400, lpdtp=0x2141d38 | out: lpchText="24 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0059.533] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0059.533] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0059.533] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0059.533] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0059.533] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0059.533] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0059.533] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\HQQgwxdfyvhroZhd0Pd.doc", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\HQQgwxdfyvhroZhd0Pd.doc", lpFilePart=0x0) returned 0x4b [0059.533] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0059.533] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\HQQgwxdfyvhroZhd0Pd.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\hqqgwxdfyvhrozhd0pd.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.534] GetFileType (hFile=0x270) returned 0x1 [0059.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0059.534] GetFileType (hFile=0x270) returned 0x1 [0059.534] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x132ff [0059.534] ReadFile (in: hFile=0x270, lpBuffer=0x21421a8, nNumberOfBytesToRead=0x132ff, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x21421a8*, lpNumberOfBytesRead=0x14de68*=0x132ff, lpOverlapped=0x0) returned 1 [0059.535] CloseHandle (hObject=0x270) returned 1 [0059.535] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\HQQgwxdfyvhroZhd0Pd.doc", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\HQQgwxdfyvhroZhd0Pd.doc", lpFilePart=0x0) returned 0x4b [0059.535] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\HQQgwxdfyvhroZhd0Pd.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\hqqgwxdfyvhrozhd0pd.doc")) returned 1 [0059.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\HQQgwxdfyvhroZhd0Pd.doc.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\HQQgwxdfyvhroZhd0Pd.doc.sad", lpFilePart=0x0) returned 0x4f [0059.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0059.537] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\HQQgwxdfyvhroZhd0Pd.doc.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\hqqgwxdfyvhrozhd0pd.doc.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.537] GetFileType (hFile=0x270) returned 0x1 [0059.537] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0059.537] GetFileType (hFile=0x270) returned 0x1 [0059.538] WriteFile (in: hFile=0x270, lpBuffer=0x2156d00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2156d00*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.539] WriteFile (in: hFile=0x270, lpBuffer=0x2156d00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2156d00*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.539] WriteFile (in: hFile=0x270, lpBuffer=0x2156d00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2156d00*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.539] WriteFile (in: hFile=0x270, lpBuffer=0x2156d00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2156d00*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.540] WriteFile (in: hFile=0x270, lpBuffer=0x2156d00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2156d00*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.541] WriteFile (in: hFile=0x270, lpBuffer=0x2156d00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2156d00*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.542] WriteFile (in: hFile=0x270, lpBuffer=0x2156d00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2156d00*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.542] WriteFile (in: hFile=0x270, lpBuffer=0x2156d00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2156d00*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.542] WriteFile (in: hFile=0x270, lpBuffer=0x2156d00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2156d00*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.543] WriteFile (in: hFile=0x270, lpBuffer=0x2156d00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2156d00*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.543] WriteFile (in: hFile=0x270, lpBuffer=0x2156d00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2156d00*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.543] WriteFile (in: hFile=0x270, lpBuffer=0x2156d00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2156d00*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.544] WriteFile (in: hFile=0x270, lpBuffer=0x2156d00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2156d00*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.544] WriteFile (in: hFile=0x270, lpBuffer=0x2156d00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2156d00*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.544] WriteFile (in: hFile=0x270, lpBuffer=0x2156d00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2156d00*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.545] WriteFile (in: hFile=0x270, lpBuffer=0x2156d00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2156d00*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.545] WriteFile (in: hFile=0x270, lpBuffer=0x2156d00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2156d00*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.545] WriteFile (in: hFile=0x270, lpBuffer=0x2156d00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2156d00*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.546] WriteFile (in: hFile=0x270, lpBuffer=0x2156d00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2156d00*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.546] WriteFile (in: hFile=0x270, lpBuffer=0x2156d00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2156d00*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.546] WriteFile (in: hFile=0x270, lpBuffer=0x2156d00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2156d00*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.546] WriteFile (in: hFile=0x270, lpBuffer=0x2156d00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2156d00*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.546] WriteFile (in: hFile=0x270, lpBuffer=0x2156d00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2156d00*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.547] WriteFile (in: hFile=0x270, lpBuffer=0x2156d00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2156d00*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.547] WriteFile (in: hFile=0x270, lpBuffer=0x2156d00*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2156d00*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.547] WriteFile (in: hFile=0x270, lpBuffer=0x2156d00*, nNumberOfBytesToWrite=0x954, lpNumberOfBytesWritten=0x14dd28, lpOverlapped=0x0 | out: lpBuffer=0x2156d00*, lpNumberOfBytesWritten=0x14dd28*=0x954, lpOverlapped=0x0) returned 1 [0059.547] CloseHandle (hObject=0x270) returned 1 [0059.557] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0059.557] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0059.557] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.557] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0059.557] DrawTextExW (in: hdc=0x8010893, lpchText="25 Files\r\nEncrypted", cchText=19, lprc=0x14dc08, format=0x2400, lpdtp=0x2157ef8 | out: lpchText="25 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0059.557] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0059.557] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0059.558] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0059.558] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0059.558] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0059.558] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0059.558] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OwcKj4d-MBeQBkY-WfA.csv", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OwcKj4d-MBeQBkY-WfA.csv", lpFilePart=0x0) returned 0x4b [0059.558] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0059.558] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OwcKj4d-MBeQBkY-WfA.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\owckj4d-mbeqbky-wfa.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.558] GetFileType (hFile=0x270) returned 0x1 [0059.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0059.558] GetFileType (hFile=0x270) returned 0x1 [0059.558] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0xe161 [0059.558] ReadFile (in: hFile=0x270, lpBuffer=0x2158368, nNumberOfBytesToRead=0xe161, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x2158368*, lpNumberOfBytesRead=0x14de68*=0xe161, lpOverlapped=0x0) returned 1 [0059.559] CloseHandle (hObject=0x270) returned 1 [0059.560] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OwcKj4d-MBeQBkY-WfA.csv", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OwcKj4d-MBeQBkY-WfA.csv", lpFilePart=0x0) returned 0x4b [0059.560] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OwcKj4d-MBeQBkY-WfA.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\owckj4d-mbeqbky-wfa.csv")) returned 1 [0059.561] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OwcKj4d-MBeQBkY-WfA.csv.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OwcKj4d-MBeQBkY-WfA.csv.sad", lpFilePart=0x0) returned 0x4f [0059.562] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0059.562] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OwcKj4d-MBeQBkY-WfA.csv.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\owckj4d-mbeqbky-wfa.csv.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.562] GetFileType (hFile=0x270) returned 0x1 [0059.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0059.562] GetFileType (hFile=0x270) returned 0x1 [0059.562] WriteFile (in: hFile=0x270, lpBuffer=0x2167d28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2167d28*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.563] WriteFile (in: hFile=0x270, lpBuffer=0x2167d28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2167d28*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.563] WriteFile (in: hFile=0x270, lpBuffer=0x2167d28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2167d28*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.564] WriteFile (in: hFile=0x270, lpBuffer=0x2167d28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2167d28*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.564] WriteFile (in: hFile=0x270, lpBuffer=0x2167d28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2167d28*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.564] WriteFile (in: hFile=0x270, lpBuffer=0x2167d28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2167d28*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.564] WriteFile (in: hFile=0x270, lpBuffer=0x2167d28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2167d28*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.564] WriteFile (in: hFile=0x270, lpBuffer=0x2167d28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2167d28*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.565] WriteFile (in: hFile=0x270, lpBuffer=0x2167d28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2167d28*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.565] WriteFile (in: hFile=0x270, lpBuffer=0x2167d28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2167d28*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.565] WriteFile (in: hFile=0x270, lpBuffer=0x2167d28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2167d28*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.565] WriteFile (in: hFile=0x270, lpBuffer=0x2167d28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2167d28*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.565] WriteFile (in: hFile=0x270, lpBuffer=0x2167d28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2167d28*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.565] WriteFile (in: hFile=0x270, lpBuffer=0x2167d28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2167d28*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.566] WriteFile (in: hFile=0x270, lpBuffer=0x2167d28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2167d28*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.566] WriteFile (in: hFile=0x270, lpBuffer=0x2167d28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2167d28*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.566] WriteFile (in: hFile=0x270, lpBuffer=0x2167d28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2167d28*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.566] WriteFile (in: hFile=0x270, lpBuffer=0x2167d28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2167d28*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0059.566] WriteFile (in: hFile=0x270, lpBuffer=0x2167d28*, nNumberOfBytesToWrite=0xc84, lpNumberOfBytesWritten=0x14dd28, lpOverlapped=0x0 | out: lpBuffer=0x2167d28*, lpNumberOfBytesWritten=0x14dd28*=0xc84, lpOverlapped=0x0) returned 1 [0059.567] CloseHandle (hObject=0x270) returned 1 [0059.568] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0059.568] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0059.569] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.569] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0059.569] DrawTextExW (in: hdc=0x8010893, lpchText="26 Files\r\nEncrypted", cchText=19, lprc=0x14dc08, format=0x2400, lpdtp=0x2168f20 | out: lpchText="26 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0059.569] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0059.569] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0059.569] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0059.569] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0059.569] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0059.569] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0059.569] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0059.569] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0059.569] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e080) returned 1 [0059.569] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m", lpFilePart=0x0) returned 0x33 [0059.569] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\", nBufferLength=0x105, lpBuffer=0x14db10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\", lpFilePart=0x0) returned 0x34 [0059.569] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\*", lpFindFileData=0x14dd20 | out: lpFindFileData=0x14dd20) returned 0xa748e0 [0059.570] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0059.570] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0059.570] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0059.570] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0059.570] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0059.570] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0059.571] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0059.571] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0059.571] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0059.571] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0059.571] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 0 [0059.571] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0059.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dfd0) returned 1 [0059.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14df90) returned 1 [0059.571] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0059.572] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0059.572] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.572] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.572] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x4f [0059.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dd90) returned 1 [0059.572] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\d9klba\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.572] GetFileType (hFile=0x270) returned 0x1 [0059.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd00) returned 1 [0059.572] GetFileType (hFile=0x270) returned 0x1 [0059.572] WriteFile (in: hFile=0x270, lpBuffer=0x216c928*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x14ddd8, lpOverlapped=0x0 | out: lpBuffer=0x216c928*, lpNumberOfBytesWritten=0x14ddd8*=0x119, lpOverlapped=0x0) returned 1 [0059.573] CloseHandle (hObject=0x270) returned 1 [0059.573] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.573] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14df70) returned 1 [0059.574] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba", lpFilePart=0x0) returned 0x3a [0059.574] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\", nBufferLength=0x105, lpBuffer=0x14da00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\", lpFilePart=0x0) returned 0x3b [0059.574] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\*", lpFindFileData=0x14dc10 | out: lpFindFileData=0x14dc10) returned 0xa748e0 [0059.574] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.574] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.574] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.574] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.574] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.575] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.575] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.575] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.575] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 0 [0059.575] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0059.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dec0) returned 1 [0059.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de80) returned 1 [0059.575] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.575] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.575] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0059.575] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0059.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\34tyAYeA.odt", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\34tyAYeA.odt", lpFilePart=0x0) returned 0x47 [0059.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0059.576] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\34tyAYeA.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\d9klba\\34tyayea.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.576] GetFileType (hFile=0x270) returned 0x1 [0059.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0059.576] GetFileType (hFile=0x270) returned 0x1 [0059.576] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x4d84 [0059.576] ReadFile (in: hFile=0x270, lpBuffer=0x216fa88, nNumberOfBytesToRead=0x4d84, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x216fa88*, lpNumberOfBytesRead=0x14dd58*=0x4d84, lpOverlapped=0x0) returned 1 [0059.577] CloseHandle (hObject=0x270) returned 1 [0059.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\34tyAYeA.odt", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\34tyAYeA.odt", lpFilePart=0x0) returned 0x47 [0059.577] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\34tyAYeA.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\d9klba\\34tyayea.odt")) returned 1 [0059.579] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\34tyAYeA.odt.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\34tyAYeA.odt.sad", lpFilePart=0x0) returned 0x4b [0059.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0059.579] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\34tyAYeA.odt.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\d9klba\\34tyayea.odt.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.579] GetFileType (hFile=0x270) returned 0x1 [0059.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0059.579] GetFileType (hFile=0x270) returned 0x1 [0059.579] WriteFile (in: hFile=0x270, lpBuffer=0x2182f18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2182f18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.588] WriteFile (in: hFile=0x270, lpBuffer=0x2182f18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2182f18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.588] WriteFile (in: hFile=0x270, lpBuffer=0x2182f18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2182f18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.589] WriteFile (in: hFile=0x270, lpBuffer=0x2182f18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2182f18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.589] WriteFile (in: hFile=0x270, lpBuffer=0x2182f18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2182f18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.589] WriteFile (in: hFile=0x270, lpBuffer=0x2182f18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2182f18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.589] WriteFile (in: hFile=0x270, lpBuffer=0x2182f18*, nNumberOfBytesToWrite=0x75c, lpNumberOfBytesWritten=0x14dc18, lpOverlapped=0x0 | out: lpBuffer=0x2182f18*, lpNumberOfBytesWritten=0x14dc18*=0x75c, lpOverlapped=0x0) returned 1 [0059.589] CloseHandle (hObject=0x270) returned 1 [0059.595] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0059.595] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0059.595] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.595] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0059.595] DrawTextExW (in: hdc=0x8010893, lpchText="27 Files\r\nEncrypted", cchText=19, lprc=0x14daf8, format=0x2400, lpdtp=0x2184110 | out: lpchText="27 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0059.595] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.596] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.596] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.596] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.596] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0059.596] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0059.596] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\8qwYJhJM0_Og_1FkPBue.xls", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\8qwYJhJM0_Og_1FkPBue.xls", lpFilePart=0x0) returned 0x53 [0059.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0059.596] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\8qwYJhJM0_Og_1FkPBue.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\d9klba\\8qwyjhjm0_og_1fkpbue.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.596] GetFileType (hFile=0x270) returned 0x1 [0059.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0059.596] GetFileType (hFile=0x270) returned 0x1 [0059.596] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x1754f [0059.596] ReadFile (in: hFile=0x270, lpBuffer=0x121f12b8, nNumberOfBytesToRead=0x1754f, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x121f12b8*, lpNumberOfBytesRead=0x14dd58*=0x1754f, lpOverlapped=0x0) returned 1 [0059.597] CloseHandle (hObject=0x270) returned 1 [0059.598] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\8qwYJhJM0_Og_1FkPBue.xls", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\8qwYJhJM0_Og_1FkPBue.xls", lpFilePart=0x0) returned 0x53 [0059.598] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\8qwYJhJM0_Og_1FkPBue.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\d9klba\\8qwyjhjm0_og_1fkpbue.xls")) returned 1 [0059.600] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\8qwYJhJM0_Og_1FkPBue.xls.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\8qwYJhJM0_Og_1FkPBue.xls.sad", lpFilePart=0x0) returned 0x57 [0059.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0059.600] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\8qwYJhJM0_Og_1FkPBue.xls.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\d9klba\\8qwyjhjm0_og_1fkpbue.xls.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.600] GetFileType (hFile=0x270) returned 0x1 [0059.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0059.600] GetFileType (hFile=0x270) returned 0x1 [0059.601] WriteFile (in: hFile=0x270, lpBuffer=0x2185e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2185e18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.601] WriteFile (in: hFile=0x270, lpBuffer=0x2185e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2185e18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.602] WriteFile (in: hFile=0x270, lpBuffer=0x2185e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2185e18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.602] WriteFile (in: hFile=0x270, lpBuffer=0x2185e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2185e18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.602] WriteFile (in: hFile=0x270, lpBuffer=0x2185e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2185e18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.602] WriteFile (in: hFile=0x270, lpBuffer=0x2185e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2185e18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.603] WriteFile (in: hFile=0x270, lpBuffer=0x2185e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2185e18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.603] WriteFile (in: hFile=0x270, lpBuffer=0x2185e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2185e18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.603] WriteFile (in: hFile=0x270, lpBuffer=0x2185e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2185e18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.603] WriteFile (in: hFile=0x270, lpBuffer=0x2185e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2185e18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.603] WriteFile (in: hFile=0x270, lpBuffer=0x2185e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2185e18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.604] WriteFile (in: hFile=0x270, lpBuffer=0x2185e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2185e18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.604] WriteFile (in: hFile=0x270, lpBuffer=0x2185e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2185e18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.604] WriteFile (in: hFile=0x270, lpBuffer=0x2185e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2185e18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.604] WriteFile (in: hFile=0x270, lpBuffer=0x2185e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2185e18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.607] WriteFile (in: hFile=0x270, lpBuffer=0x2185e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2185e18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.608] WriteFile (in: hFile=0x270, lpBuffer=0x2185e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2185e18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.608] WriteFile (in: hFile=0x270, lpBuffer=0x2185e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2185e18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.608] WriteFile (in: hFile=0x270, lpBuffer=0x2185e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2185e18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.608] WriteFile (in: hFile=0x270, lpBuffer=0x2185e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2185e18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.608] WriteFile (in: hFile=0x270, lpBuffer=0x2185e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2185e18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.609] WriteFile (in: hFile=0x270, lpBuffer=0x2185e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2185e18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.609] WriteFile (in: hFile=0x270, lpBuffer=0x2185e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2185e18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.609] WriteFile (in: hFile=0x270, lpBuffer=0x2185e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2185e18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.609] WriteFile (in: hFile=0x270, lpBuffer=0x2185e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2185e18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.609] WriteFile (in: hFile=0x270, lpBuffer=0x2185e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2185e18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.610] WriteFile (in: hFile=0x270, lpBuffer=0x2185e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2185e18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.610] WriteFile (in: hFile=0x270, lpBuffer=0x2185e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2185e18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.610] WriteFile (in: hFile=0x270, lpBuffer=0x2185e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2185e18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.610] WriteFile (in: hFile=0x270, lpBuffer=0x2185e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2185e18*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.610] WriteFile (in: hFile=0x270, lpBuffer=0x2185e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dc38, lpOverlapped=0x0 | out: lpBuffer=0x2185e18*, lpNumberOfBytesWritten=0x14dc38*=0x1000, lpOverlapped=0x0) returned 1 [0059.611] WriteFile (in: hFile=0x270, lpBuffer=0x2185e18*, nNumberOfBytesToWrite=0x1c0, lpNumberOfBytesWritten=0x14dc18, lpOverlapped=0x0 | out: lpBuffer=0x2185e18*, lpNumberOfBytesWritten=0x14dc18*=0x1c0, lpOverlapped=0x0) returned 1 [0059.611] CloseHandle (hObject=0x270) returned 1 [0059.617] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0059.617] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0059.617] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.617] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0059.617] DrawTextExW (in: hdc=0x8010893, lpchText="28 Files\r\nEncrypted", cchText=19, lprc=0x14daf8, format=0x2400, lpdtp=0x2187010 | out: lpchText="28 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0059.617] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.617] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.617] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.617] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.617] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0059.617] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0059.617] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\IYORocB89p_lfGl.doc", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\IYORocB89p_lfGl.doc", lpFilePart=0x0) returned 0x4e [0059.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0059.618] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\IYORocB89p_lfGl.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\d9klba\\iyorocb89p_lfgl.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0059.618] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0xe120 [0059.618] ReadFile (in: hFile=0x270, lpBuffer=0x2187478, nNumberOfBytesToRead=0xe120, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x2187478*, lpNumberOfBytesRead=0x14dd58*=0xe120, lpOverlapped=0x0) returned 1 [0059.620] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\IYORocB89p_lfGl.doc", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\IYORocB89p_lfGl.doc", lpFilePart=0x0) returned 0x4e [0059.620] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\IYORocB89p_lfGl.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\d9klba\\iyorocb89p_lfgl.doc")) returned 1 [0059.622] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\IYORocB89p_lfGl.doc.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\IYORocB89p_lfGl.doc.sad", lpFilePart=0x0) returned 0x52 [0059.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0059.622] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\IYORocB89p_lfGl.doc.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\d9klba\\iyorocb89p_lfgl.doc.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0059.626] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0059.626] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0059.626] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.626] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0059.626] DrawTextExW (in: hdc=0x8010893, lpchText="29 Files\r\nEncrypted", cchText=19, lprc=0x14daf8, format=0x2400, lpdtp=0x2197ff8 | out: lpchText="29 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0059.627] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.627] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.627] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.627] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.627] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0059.627] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0059.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\kcbegD623.doc", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\kcbegD623.doc", lpFilePart=0x0) returned 0x48 [0059.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0059.627] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\kcbegD623.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\d9klba\\kcbegd623.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.627] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0059.627] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x1085c [0059.627] ReadFile (in: hFile=0x270, lpBuffer=0x2198448, nNumberOfBytesToRead=0x1085c, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x2198448*, lpNumberOfBytesRead=0x14dd58*=0x1085c, lpOverlapped=0x0) returned 1 [0059.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\kcbegD623.doc", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\kcbegD623.doc", lpFilePart=0x0) returned 0x48 [0059.629] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\kcbegD623.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\d9klba\\kcbegd623.doc")) returned 1 [0059.630] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\kcbegD623.doc.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\kcbegD623.doc.sad", lpFilePart=0x0) returned 0x4c [0059.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0059.631] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\kcbegD623.doc.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\d9klba\\kcbegd623.doc.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0059.633] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0059.633] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0059.634] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.634] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0059.634] DrawTextExW (in: hdc=0x8010893, lpchText="30 Files\r\nEncrypted", cchText=19, lprc=0x14daf8, format=0x2400, lpdtp=0x21ab6e8 | out: lpchText="30 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0059.634] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.634] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.634] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.634] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.634] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0059.634] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0059.634] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\LTMcLKm jgj_DQxnOpW.rtf", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\LTMcLKm jgj_DQxnOpW.rtf", lpFilePart=0x0) returned 0x52 [0059.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0059.634] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\LTMcLKm jgj_DQxnOpW.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\d9klba\\ltmclkm jgj_dqxnopw.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0059.634] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x13fc8 [0059.634] ReadFile (in: hFile=0x270, lpBuffer=0x21abb68, nNumberOfBytesToRead=0x13fc8, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x21abb68*, lpNumberOfBytesRead=0x14dd58*=0x13fc8, lpOverlapped=0x0) returned 1 [0059.636] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\LTMcLKm jgj_DQxnOpW.rtf", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\LTMcLKm jgj_DQxnOpW.rtf", lpFilePart=0x0) returned 0x52 [0059.636] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\LTMcLKm jgj_DQxnOpW.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\d9klba\\ltmclkm jgj_dqxnopw.rtf")) returned 1 [0059.637] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\LTMcLKm jgj_DQxnOpW.rtf.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\LTMcLKm jgj_DQxnOpW.rtf.sad", lpFilePart=0x0) returned 0x56 [0059.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0059.637] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\LTMcLKm jgj_DQxnOpW.rtf.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\d9klba\\ltmclkm jgj_dqxnopw.rtf.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0059.642] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0059.642] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0059.642] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.642] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0059.642] DrawTextExW (in: hdc=0x8010893, lpchText="31 Files\r\nEncrypted", cchText=19, lprc=0x14daf8, format=0x2400, lpdtp=0x21c25b0 | out: lpchText="31 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0059.642] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.642] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.642] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.642] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.643] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.643] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.643] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.643] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.643] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0059.643] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0059.643] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\tsr4mPTWX2Pu-.rtf", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\tsr4mPTWX2Pu-.rtf", lpFilePart=0x0) returned 0x4c [0059.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0059.643] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\tsr4mPTWX2Pu-.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\d9klba\\tsr4mptwx2pu-.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0059.643] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x1595 [0059.643] ReadFile (in: hFile=0x270, lpBuffer=0x21c2c20, nNumberOfBytesToRead=0x1595, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x21c2c20*, lpNumberOfBytesRead=0x14dd58*=0x1595, lpOverlapped=0x0) returned 1 [0059.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\tsr4mPTWX2Pu-.rtf", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\tsr4mPTWX2Pu-.rtf", lpFilePart=0x0) returned 0x4c [0059.644] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\tsr4mPTWX2Pu-.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\d9klba\\tsr4mptwx2pu-.rtf")) returned 1 [0059.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\tsr4mPTWX2Pu-.rtf.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\tsr4mPTWX2Pu-.rtf.sad", lpFilePart=0x0) returned 0x50 [0059.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0059.646] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\tsr4mPTWX2Pu-.rtf.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\d9klba\\tsr4mptwx2pu-.rtf.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0059.648] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0059.648] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0059.649] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.649] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0059.649] DrawTextExW (in: hdc=0x8010893, lpchText="32 Files\r\nEncrypted", cchText=19, lprc=0x14daf8, format=0x2400, lpdtp=0x21ca5c8 | out: lpchText="32 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0059.649] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.649] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.649] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.649] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14df70) returned 1 [0059.649] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba", lpFilePart=0x0) returned 0x3a [0059.649] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\", nBufferLength=0x105, lpBuffer=0x14da00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\", lpFilePart=0x0) returned 0x3b [0059.649] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\d9KLba\\*", lpFindFileData=0x14dc10 | out: lpFindFileData=0x14dc10) returned 0xa748e0 [0059.649] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.650] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.650] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.650] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.650] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.650] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.651] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.651] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.651] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 0 [0059.651] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0059.651] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dec0) returned 1 [0059.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de80) returned 1 [0059.652] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.652] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.652] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0059.652] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0059.652] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0059.652] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0059.652] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.652] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.652] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x56 [0059.652] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dd90) returned 1 [0059.652] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\fuc5zj ig0rfw\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.652] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd00) returned 1 [0059.654] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.654] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14df70) returned 1 [0059.654] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW", lpFilePart=0x0) returned 0x41 [0059.654] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\", nBufferLength=0x105, lpBuffer=0x14da00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\", lpFilePart=0x0) returned 0x42 [0059.654] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\*", lpFindFileData=0x14dc10 | out: lpFindFileData=0x14dc10) returned 0xa748e0 [0059.654] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.654] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.655] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.655] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.655] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.655] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.655] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 0 [0059.655] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0059.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dec0) returned 1 [0059.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de80) returned 1 [0059.656] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.656] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.656] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0059.656] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0059.656] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\9wDdZOd5xc4Zcf.rtf", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\9wDdZOd5xc4Zcf.rtf", lpFilePart=0x0) returned 0x54 [0059.656] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0059.656] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\9wDdZOd5xc4Zcf.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\fuc5zj ig0rfw\\9wddzod5xc4zcf.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.656] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0059.656] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x8158 [0059.656] ReadFile (in: hFile=0x270, lpBuffer=0x21d0b40, nNumberOfBytesToRead=0x8158, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x21d0b40*, lpNumberOfBytesRead=0x14dd58*=0x8158, lpOverlapped=0x0) returned 1 [0059.657] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\9wDdZOd5xc4Zcf.rtf", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\9wDdZOd5xc4Zcf.rtf", lpFilePart=0x0) returned 0x54 [0059.657] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\9wDdZOd5xc4Zcf.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\fuc5zj ig0rfw\\9wddzod5xc4zcf.rtf")) returned 1 [0059.659] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\9wDdZOd5xc4Zcf.rtf.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\9wDdZOd5xc4Zcf.rtf.sad", lpFilePart=0x0) returned 0x58 [0059.659] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0059.659] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\9wDdZOd5xc4Zcf.rtf.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\fuc5zj ig0rfw\\9wddzod5xc4zcf.rtf.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0059.662] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0059.662] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0059.662] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.662] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0059.662] DrawTextExW (in: hdc=0x8010893, lpchText="33 Files\r\nEncrypted", cchText=19, lprc=0x14daf8, format=0x2400, lpdtp=0x21db728 | out: lpchText="33 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0059.663] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.663] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.663] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.663] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.663] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0059.663] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0059.663] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\gKtFx6H6Bu.rtf", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\gKtFx6H6Bu.rtf", lpFilePart=0x0) returned 0x50 [0059.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0059.663] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\gKtFx6H6Bu.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\fuc5zj ig0rfw\\gktfx6h6bu.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0059.663] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x18b76 [0059.663] ReadFile (in: hFile=0x270, lpBuffer=0x122e3400, nNumberOfBytesToRead=0x18b76, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x122e3400*, lpNumberOfBytesRead=0x14dd58*=0x18b76, lpOverlapped=0x0) returned 1 [0059.665] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\gKtFx6H6Bu.rtf", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\gKtFx6H6Bu.rtf", lpFilePart=0x0) returned 0x50 [0059.665] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\gKtFx6H6Bu.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\fuc5zj ig0rfw\\gktfx6h6bu.rtf")) returned 1 [0059.667] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\gKtFx6H6Bu.rtf.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\gKtFx6H6Bu.rtf.sad", lpFilePart=0x0) returned 0x54 [0059.667] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0059.667] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\gKtFx6H6Bu.rtf.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\fuc5zj ig0rfw\\gktfx6h6bu.rtf.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0059.671] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0059.672] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0059.672] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.672] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0059.672] DrawTextExW (in: hdc=0x8010893, lpchText="34 Files\r\nEncrypted", cchText=19, lprc=0x14daf8, format=0x2400, lpdtp=0x21de5e0 | out: lpchText="34 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0059.672] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.672] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.672] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.672] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.672] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0059.672] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0059.672] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\mu7 -015C9x4.ppt", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\mu7 -015C9x4.ppt", lpFilePart=0x0) returned 0x52 [0059.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0059.672] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\mu7 -015C9x4.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\fuc5zj ig0rfw\\mu7 -015c9x4.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0059.672] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0xaceb [0059.672] ReadFile (in: hFile=0x270, lpBuffer=0x21dea50, nNumberOfBytesToRead=0xaceb, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x21dea50*, lpNumberOfBytesRead=0x14dd58*=0xaceb, lpOverlapped=0x0) returned 1 [0059.674] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\mu7 -015C9x4.ppt", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\mu7 -015C9x4.ppt", lpFilePart=0x0) returned 0x52 [0059.674] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\mu7 -015C9x4.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\fuc5zj ig0rfw\\mu7 -015c9x4.ppt")) returned 1 [0059.676] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\mu7 -015C9x4.ppt.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\mu7 -015C9x4.ppt.sad", lpFilePart=0x0) returned 0x56 [0059.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0059.676] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\mu7 -015C9x4.ppt.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\fuc5zj ig0rfw\\mu7 -015c9x4.ppt.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0059.678] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0059.678] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0059.679] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.679] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0059.679] DrawTextExW (in: hdc=0x8010893, lpchText="35 Files\r\nEncrypted", cchText=19, lprc=0x14daf8, format=0x2400, lpdtp=0x21ec1b8 | out: lpchText="35 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0059.679] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.679] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.679] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.679] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.679] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.679] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.679] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.679] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.679] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0059.679] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0059.679] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\uI6dyyMoPOh1-4wE.xlsx", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\uI6dyyMoPOh1-4wE.xlsx", lpFilePart=0x0) returned 0x57 [0059.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0059.679] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\uI6dyyMoPOh1-4wE.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\fuc5zj ig0rfw\\ui6dyymopoh1-4we.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0059.680] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0xc387 [0059.680] ReadFile (in: hFile=0x270, lpBuffer=0x21ec848, nNumberOfBytesToRead=0xc387, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x21ec848*, lpNumberOfBytesRead=0x14dd58*=0xc387, lpOverlapped=0x0) returned 1 [0059.681] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\uI6dyyMoPOh1-4wE.xlsx", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\uI6dyyMoPOh1-4wE.xlsx", lpFilePart=0x0) returned 0x57 [0059.681] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\uI6dyyMoPOh1-4wE.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\fuc5zj ig0rfw\\ui6dyymopoh1-4we.xlsx")) returned 1 [0059.683] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\uI6dyyMoPOh1-4wE.xlsx.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\uI6dyyMoPOh1-4wE.xlsx.sad", lpFilePart=0x0) returned 0x5b [0059.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0059.683] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\uI6dyyMoPOh1-4wE.xlsx.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\fuc5zj ig0rfw\\ui6dyymopoh1-4we.xlsx.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0059.686] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0059.686] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0059.686] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.686] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0059.686] DrawTextExW (in: hdc=0x8010893, lpchText="36 Files\r\nEncrypted", cchText=19, lprc=0x14daf8, format=0x2400, lpdtp=0x21fb668 | out: lpchText="36 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0059.686] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.686] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.686] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.686] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14df70) returned 1 [0059.686] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW", lpFilePart=0x0) returned 0x41 [0059.687] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\", nBufferLength=0x105, lpBuffer=0x14da00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\", lpFilePart=0x0) returned 0x42 [0059.687] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\fuc5ZJ iG0rFW\\*", lpFindFileData=0x14dc10 | out: lpFindFileData=0x14dc10) returned 0xa748e0 [0059.687] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.687] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.687] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.687] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.687] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.688] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.688] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 0 [0059.688] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0059.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dec0) returned 1 [0059.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de80) returned 1 [0059.688] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.688] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.688] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0059.688] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0059.688] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0059.688] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0059.688] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.688] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.688] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OyFCQ\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OyFCQ\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x4e [0059.689] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dd90) returned 1 [0059.689] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OyFCQ\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\oyfcq\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd00) returned 1 [0059.690] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.690] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14df70) returned 1 [0059.690] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OyFCQ", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OyFCQ", lpFilePart=0x0) returned 0x39 [0059.690] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OyFCQ\\", nBufferLength=0x105, lpBuffer=0x14da00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OyFCQ\\", lpFilePart=0x0) returned 0x3a [0059.690] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OyFCQ\\*", lpFindFileData=0x14dc10 | out: lpFindFileData=0x14dc10) returned 0xa748e0 [0059.690] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.691] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.691] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.691] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.691] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 0 [0059.691] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0059.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dec0) returned 1 [0059.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de80) returned 1 [0059.692] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.692] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.692] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.692] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.692] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.692] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.692] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0059.692] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0059.692] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OyFCQ\\W xJk.doc", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OyFCQ\\W xJk.doc", lpFilePart=0x0) returned 0x43 [0059.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0059.692] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OyFCQ\\W xJk.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\oyfcq\\w xjk.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.692] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0059.692] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0xa5a9 [0059.692] ReadFile (in: hFile=0x270, lpBuffer=0x2201330, nNumberOfBytesToRead=0xa5a9, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x2201330*, lpNumberOfBytesRead=0x14dd58*=0xa5a9, lpOverlapped=0x0) returned 1 [0059.693] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OyFCQ\\W xJk.doc", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OyFCQ\\W xJk.doc", lpFilePart=0x0) returned 0x43 [0059.693] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OyFCQ\\W xJk.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\oyfcq\\w xjk.doc")) returned 1 [0059.695] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OyFCQ\\W xJk.doc.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OyFCQ\\W xJk.doc.sad", lpFilePart=0x0) returned 0x47 [0059.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0059.695] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OyFCQ\\W xJk.doc.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\oyfcq\\w xjk.doc.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0059.697] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0059.698] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0059.698] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.698] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0059.698] DrawTextExW (in: hdc=0x8010893, lpchText="37 Files\r\nEncrypted", cchText=19, lprc=0x14daf8, format=0x2400, lpdtp=0x220e2e8 | out: lpchText="37 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0059.698] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.698] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.698] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.698] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.698] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0059.698] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0059.698] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OyFCQ\\ZJZMmX.csv", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OyFCQ\\ZJZMmX.csv", lpFilePart=0x0) returned 0x44 [0059.698] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0059.698] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OyFCQ\\ZJZMmX.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\oyfcq\\zjzmmx.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.699] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0059.699] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x64aa [0059.699] ReadFile (in: hFile=0x270, lpBuffer=0x220e720, nNumberOfBytesToRead=0x64aa, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x220e720*, lpNumberOfBytesRead=0x14dd58*=0x64aa, lpOverlapped=0x0) returned 1 [0059.700] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OyFCQ\\ZJZMmX.csv", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OyFCQ\\ZJZMmX.csv", lpFilePart=0x0) returned 0x44 [0059.700] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OyFCQ\\ZJZMmX.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\oyfcq\\zjzmmx.csv")) returned 1 [0059.702] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OyFCQ\\ZJZMmX.csv.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OyFCQ\\ZJZMmX.csv.sad", lpFilePart=0x0) returned 0x48 [0059.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0059.702] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OyFCQ\\ZJZMmX.csv.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\oyfcq\\zjzmmx.csv.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.704] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0059.705] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0059.705] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0059.706] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.706] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0059.706] DrawTextExW (in: hdc=0x8010893, lpchText="38 Files\r\nEncrypted", cchText=19, lprc=0x14daf8, format=0x2400, lpdtp=0x2228280 | out: lpchText="38 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0059.706] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.706] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.706] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.706] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14df70) returned 1 [0059.706] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OyFCQ", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OyFCQ", lpFilePart=0x0) returned 0x39 [0059.706] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OyFCQ\\", nBufferLength=0x105, lpBuffer=0x14da00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OyFCQ\\", lpFilePart=0x0) returned 0x3a [0059.706] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\OyFCQ\\*", lpFindFileData=0x14dc10 | out: lpFindFileData=0x14dc10) returned 0xa748e0 [0059.706] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.706] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.707] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.707] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.707] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 0 [0059.707] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0059.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dec0) returned 1 [0059.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de80) returned 1 [0059.707] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.707] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.707] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0059.707] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0059.707] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0059.707] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0059.708] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.708] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.708] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x5d [0059.708] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dd90) returned 1 [0059.708] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.708] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd00) returned 1 [0059.709] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.709] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.709] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14df70) returned 1 [0059.709] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8", lpFilePart=0x0) returned 0x48 [0059.709] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\", nBufferLength=0x105, lpBuffer=0x14da00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\", lpFilePart=0x0) returned 0x49 [0059.709] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\*", lpFindFileData=0x14dc10 | out: lpFindFileData=0x14dc10) returned 0xa748e0 [0059.709] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.709] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.710] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.710] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.710] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.710] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.710] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.710] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.710] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.710] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 0 [0059.711] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0059.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dec0) returned 1 [0059.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de80) returned 1 [0059.711] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.711] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.711] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0059.711] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0059.711] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\jIU-KTeW666u9.rtf", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\jIU-KTeW666u9.rtf", lpFilePart=0x0) returned 0x5a [0059.711] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0059.711] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\jIU-KTeW666u9.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\jiu-ktew666u9.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.711] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0059.711] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0xf8bf [0059.711] ReadFile (in: hFile=0x270, lpBuffer=0x222e6d8, nNumberOfBytesToRead=0xf8bf, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x222e6d8*, lpNumberOfBytesRead=0x14dd58*=0xf8bf, lpOverlapped=0x0) returned 1 [0059.712] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\jIU-KTeW666u9.rtf", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\jIU-KTeW666u9.rtf", lpFilePart=0x0) returned 0x5a [0059.713] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\jIU-KTeW666u9.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\jiu-ktew666u9.rtf")) returned 1 [0059.714] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\jIU-KTeW666u9.rtf.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\jIU-KTeW666u9.rtf.sad", lpFilePart=0x0) returned 0x5e [0059.714] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0059.715] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\jIU-KTeW666u9.rtf.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\jiu-ktew666u9.rtf.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.715] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0059.718] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0059.718] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0059.718] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.718] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0059.718] DrawTextExW (in: hdc=0x8010893, lpchText="39 Files\r\nEncrypted", cchText=19, lprc=0x14daf8, format=0x2400, lpdtp=0x2240a40 | out: lpchText="39 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0059.718] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.718] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.718] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.718] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.718] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0059.718] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0059.718] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\L4ikQTCMNzCWLH5RX-A.odp", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\L4ikQTCMNzCWLH5RX-A.odp", lpFilePart=0x0) returned 0x60 [0059.718] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0059.719] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\L4ikQTCMNzCWLH5RX-A.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\l4ikqtcmnzcwlh5rx-a.odp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.719] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0059.719] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0xa8bb [0059.719] ReadFile (in: hFile=0x270, lpBuffer=0x2240ee0, nNumberOfBytesToRead=0xa8bb, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x2240ee0*, lpNumberOfBytesRead=0x14dd58*=0xa8bb, lpOverlapped=0x0) returned 1 [0059.720] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\L4ikQTCMNzCWLH5RX-A.odp", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\L4ikQTCMNzCWLH5RX-A.odp", lpFilePart=0x0) returned 0x60 [0059.720] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\L4ikQTCMNzCWLH5RX-A.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\l4ikqtcmnzcwlh5rx-a.odp")) returned 1 [0059.722] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\L4ikQTCMNzCWLH5RX-A.odp.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\L4ikQTCMNzCWLH5RX-A.odp.sad", lpFilePart=0x0) returned 0x64 [0059.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0059.722] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\L4ikQTCMNzCWLH5RX-A.odp.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\l4ikqtcmnzcwlh5rx-a.odp.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.722] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0059.724] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0059.724] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0059.724] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.724] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0059.724] DrawTextExW (in: hdc=0x8010893, lpchText="40 Files\r\nEncrypted", cchText=19, lprc=0x14daf8, format=0x2400, lpdtp=0x224e280 | out: lpchText="40 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0059.725] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.725] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.725] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.725] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.725] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0059.725] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0059.725] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\reZptHYq73qP2jkk.docx", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\reZptHYq73qP2jkk.docx", lpFilePart=0x0) returned 0x5e [0059.725] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0059.725] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\reZptHYq73qP2jkk.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\rezpthyq73qp2jkk.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.725] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0059.725] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x16ed4 [0059.725] ReadFile (in: hFile=0x270, lpBuffer=0x123dc960, nNumberOfBytesToRead=0x16ed4, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x123dc960*, lpNumberOfBytesRead=0x14dd58*=0x16ed4, lpOverlapped=0x0) returned 1 [0059.729] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\reZptHYq73qP2jkk.docx", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\reZptHYq73qP2jkk.docx", lpFilePart=0x0) returned 0x5e [0059.729] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\reZptHYq73qP2jkk.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\rezpthyq73qp2jkk.docx")) returned 1 [0059.732] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\reZptHYq73qP2jkk.docx.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\reZptHYq73qP2jkk.docx.sad", lpFilePart=0x0) returned 0x62 [0059.732] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0059.732] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\reZptHYq73qP2jkk.docx.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\rezpthyq73qp2jkk.docx.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.732] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0059.736] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0059.736] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0059.736] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.736] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0059.736] DrawTextExW (in: hdc=0x8010893, lpchText="41 Files\r\nEncrypted", cchText=19, lprc=0x14daf8, format=0x2400, lpdtp=0x22511c8 | out: lpchText="41 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0059.736] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.736] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.737] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.737] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.737] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.737] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.737] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.737] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.737] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0059.737] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0059.737] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\v_QxEp7.xlsx", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\v_QxEp7.xlsx", lpFilePart=0x0) returned 0x55 [0059.737] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0059.737] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\v_QxEp7.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\v_qxep7.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0059.737] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x26db [0059.737] ReadFile (in: hFile=0x270, lpBuffer=0x2251838, nNumberOfBytesToRead=0x26db, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x2251838*, lpNumberOfBytesRead=0x14dd58*=0x26db, lpOverlapped=0x0) returned 1 [0059.738] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\v_QxEp7.xlsx", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\v_QxEp7.xlsx", lpFilePart=0x0) returned 0x55 [0059.738] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\v_QxEp7.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\v_qxep7.xlsx")) returned 1 [0059.740] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\v_QxEp7.xlsx.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\v_QxEp7.xlsx.sad", lpFilePart=0x0) returned 0x59 [0059.741] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0059.741] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\v_QxEp7.xlsx.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\v_qxep7.xlsx.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0059.742] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0059.742] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0059.743] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.743] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0059.743] DrawTextExW (in: hdc=0x8010893, lpchText="42 Files\r\nEncrypted", cchText=19, lprc=0x14daf8, format=0x2400, lpdtp=0x225d160 | out: lpchText="42 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0059.743] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.743] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.743] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.743] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.743] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0059.743] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0059.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\YwNH-.xlsx", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\YwNH-.xlsx", lpFilePart=0x0) returned 0x53 [0059.744] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0059.744] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\YwNH-.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\ywnh-.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.744] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0059.744] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x15856 [0059.744] ReadFile (in: hFile=0x270, lpBuffer=0x123f3870, nNumberOfBytesToRead=0x15856, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x123f3870*, lpNumberOfBytesRead=0x14dd58*=0x15856, lpOverlapped=0x0) returned 1 [0059.754] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\YwNH-.xlsx", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\YwNH-.xlsx", lpFilePart=0x0) returned 0x53 [0059.754] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\YwNH-.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\ywnh-.xlsx")) returned 1 [0059.757] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\YwNH-.xlsx.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\YwNH-.xlsx.sad", lpFilePart=0x0) returned 0x57 [0059.757] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0059.757] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\YwNH-.xlsx.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\ywnh-.xlsx.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.757] GetFileType (hFile=0x270) returned 0x1 [0059.757] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0059.757] GetFileType (hFile=0x270) returned 0x1 [0059.758] WriteFile (in: hFile=0x270, lpBuffer=0x21328f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21328f0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.759] WriteFile (in: hFile=0x270, lpBuffer=0x21328f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21328f0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.759] WriteFile (in: hFile=0x270, lpBuffer=0x21328f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21328f0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.759] WriteFile (in: hFile=0x270, lpBuffer=0x21328f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21328f0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.760] WriteFile (in: hFile=0x270, lpBuffer=0x21328f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21328f0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.760] WriteFile (in: hFile=0x270, lpBuffer=0x21328f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21328f0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.760] WriteFile (in: hFile=0x270, lpBuffer=0x21328f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21328f0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.761] WriteFile (in: hFile=0x270, lpBuffer=0x21328f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21328f0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.761] WriteFile (in: hFile=0x270, lpBuffer=0x21328f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21328f0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.761] WriteFile (in: hFile=0x270, lpBuffer=0x21328f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21328f0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.762] WriteFile (in: hFile=0x270, lpBuffer=0x21328f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21328f0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.762] WriteFile (in: hFile=0x270, lpBuffer=0x21328f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21328f0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.762] WriteFile (in: hFile=0x270, lpBuffer=0x21328f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21328f0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.763] WriteFile (in: hFile=0x270, lpBuffer=0x21328f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21328f0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.763] WriteFile (in: hFile=0x270, lpBuffer=0x21328f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21328f0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.764] WriteFile (in: hFile=0x270, lpBuffer=0x21328f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21328f0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.764] WriteFile (in: hFile=0x270, lpBuffer=0x21328f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21328f0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.764] WriteFile (in: hFile=0x270, lpBuffer=0x21328f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21328f0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.765] WriteFile (in: hFile=0x270, lpBuffer=0x21328f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21328f0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.765] WriteFile (in: hFile=0x270, lpBuffer=0x21328f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21328f0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.765] WriteFile (in: hFile=0x270, lpBuffer=0x21328f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21328f0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.766] WriteFile (in: hFile=0x270, lpBuffer=0x21328f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21328f0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.766] WriteFile (in: hFile=0x270, lpBuffer=0x21328f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21328f0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.766] WriteFile (in: hFile=0x270, lpBuffer=0x21328f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21328f0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.766] WriteFile (in: hFile=0x270, lpBuffer=0x21328f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21328f0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.767] WriteFile (in: hFile=0x270, lpBuffer=0x21328f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21328f0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.767] WriteFile (in: hFile=0x270, lpBuffer=0x21328f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21328f0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.767] WriteFile (in: hFile=0x270, lpBuffer=0x21328f0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21328f0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0059.768] WriteFile (in: hFile=0x270, lpBuffer=0x21328f0*, nNumberOfBytesToWrite=0xb20, lpNumberOfBytesWritten=0x14dc18, lpOverlapped=0x0 | out: lpBuffer=0x21328f0*, lpNumberOfBytesWritten=0x14dc18*=0xb20, lpOverlapped=0x0) returned 1 [0059.768] CloseHandle (hObject=0x270) returned 1 [0059.772] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0059.772] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0059.773] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.773] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0059.773] DrawTextExW (in: hdc=0x8010893, lpchText="43 Files\r\nEncrypted", cchText=19, lprc=0x14daf8, format=0x2400, lpdtp=0x2133ae8 | out: lpchText="43 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0059.773] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.773] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.773] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.773] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.773] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14df70) returned 1 [0059.773] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8", lpFilePart=0x0) returned 0x48 [0059.773] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\", nBufferLength=0x105, lpBuffer=0x14da00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\", lpFilePart=0x0) returned 0x49 [0059.773] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\*", lpFindFileData=0x14dc10 | out: lpFindFileData=0x14dc10) returned 0xa748e0 [0059.774] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.774] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.774] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.774] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.774] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.774] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.775] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.775] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.775] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0059.775] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 0 [0059.775] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0059.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dec0) returned 1 [0059.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de80) returned 1 [0059.775] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.775] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.775] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0059.775] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0059.775] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14d7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x6f [0059.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc80) returned 1 [0059.775] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\rhii0ypxv4yyzzvl2\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.776] GetFileType (hFile=0x270) returned 0x1 [0059.776] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dbf0) returned 1 [0059.776] GetFileType (hFile=0x270) returned 0x1 [0059.776] WriteFile (in: hFile=0x270, lpBuffer=0x21376b0*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x14dcc8, lpOverlapped=0x0 | out: lpBuffer=0x21376b0*, lpNumberOfBytesWritten=0x14dcc8*=0x119, lpOverlapped=0x0) returned 1 [0059.777] CloseHandle (hObject=0x270) returned 1 [0059.777] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0059.777] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0059.777] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14de60) returned 1 [0059.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2", lpFilePart=0x0) returned 0x5a [0059.777] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\", nBufferLength=0x105, lpBuffer=0x14d8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\", lpFilePart=0x0) returned 0x5b [0059.777] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\*", lpFindFileData=0x14db00 | out: lpFindFileData=0x14db00) returned 0xa748e0 [0059.778] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0059.778] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0059.778] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0059.778] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0059.778] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0059.778] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0059.778] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 0 [0059.778] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0059.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14ddb0) returned 1 [0059.778] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd70) returned 1 [0059.778] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0059.778] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0059.779] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0059.779] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0059.779] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\bt2Bl.csv", nBufferLength=0x105, lpBuffer=0x14d6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\bt2Bl.csv", lpFilePart=0x0) returned 0x64 [0059.779] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14db80) returned 1 [0059.779] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\bt2Bl.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\rhii0ypxv4yyzzvl2\\bt2bl.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.779] GetFileType (hFile=0x270) returned 0x1 [0059.779] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14daf0) returned 1 [0059.779] GetFileType (hFile=0x270) returned 0x1 [0059.779] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14dd18 | out: lpFileSizeHigh=0x14dd18*=0x0) returned 0x6107 [0059.779] ReadFile (in: hFile=0x270, lpBuffer=0x213a790, nNumberOfBytesToRead=0x6107, lpNumberOfBytesRead=0x14dc48, lpOverlapped=0x0 | out: lpBuffer=0x213a790*, lpNumberOfBytesRead=0x14dc48*=0x6107, lpOverlapped=0x0) returned 1 [0059.780] CloseHandle (hObject=0x270) returned 1 [0059.780] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\bt2Bl.csv", nBufferLength=0x105, lpBuffer=0x14d840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\bt2Bl.csv", lpFilePart=0x0) returned 0x64 [0059.780] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\bt2Bl.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\rhii0ypxv4yyzzvl2\\bt2bl.csv")) returned 1 [0059.782] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\bt2Bl.csv.sad", nBufferLength=0x105, lpBuffer=0x14d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\bt2Bl.csv.sad", lpFilePart=0x0) returned 0x68 [0059.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dac0) returned 1 [0059.782] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\bt2Bl.csv.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\rhii0ypxv4yyzzvl2\\bt2bl.csv.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.782] GetFileType (hFile=0x270) returned 0x1 [0059.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14da30) returned 1 [0059.782] GetFileType (hFile=0x270) returned 0x1 [0059.782] WriteFile (in: hFile=0x270, lpBuffer=0x2152460*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x2152460*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.783] WriteFile (in: hFile=0x270, lpBuffer=0x2152460*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x2152460*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.783] WriteFile (in: hFile=0x270, lpBuffer=0x2152460*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x2152460*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.784] WriteFile (in: hFile=0x270, lpBuffer=0x2152460*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x2152460*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.784] WriteFile (in: hFile=0x270, lpBuffer=0x2152460*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x2152460*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.784] WriteFile (in: hFile=0x270, lpBuffer=0x2152460*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x2152460*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.785] WriteFile (in: hFile=0x270, lpBuffer=0x2152460*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x2152460*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.785] WriteFile (in: hFile=0x270, lpBuffer=0x2152460*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14db28, lpOverlapped=0x0 | out: lpBuffer=0x2152460*, lpNumberOfBytesWritten=0x14db28*=0x1000, lpOverlapped=0x0) returned 1 [0059.785] WriteFile (in: hFile=0x270, lpBuffer=0x2152460*, nNumberOfBytesToWrite=0x160, lpNumberOfBytesWritten=0x14db08, lpOverlapped=0x0 | out: lpBuffer=0x2152460*, lpNumberOfBytesWritten=0x14db08*=0x160, lpOverlapped=0x0) returned 1 [0059.785] CloseHandle (hObject=0x270) returned 1 [0059.788] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0059.789] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0059.789] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.789] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0059.789] DrawTextExW (in: hdc=0x8010893, lpchText="44 Files\r\nEncrypted", cchText=19, lprc=0x14d9e8, format=0x2400, lpdtp=0x2153658 | out: lpchText="44 Files\r\nEncrypted", lprc=0x14d9e8) returned 26 [0059.789] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0059.789] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0059.789] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0059.789] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0059.789] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0059.789] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0059.789] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\FAs-rKjbUCrz1ftREXx.rtf", nBufferLength=0x105, lpBuffer=0x14d6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\FAs-rKjbUCrz1ftREXx.rtf", lpFilePart=0x0) returned 0x72 [0059.789] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14db80) returned 1 [0059.790] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\FAs-rKjbUCrz1ftREXx.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\rhii0ypxv4yyzzvl2\\fas-rkjbucrz1ftrexx.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.790] GetFileType (hFile=0x270) returned 0x1 [0059.790] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14daf0) returned 1 [0059.790] GetFileType (hFile=0x270) returned 0x1 [0059.790] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14dd18 | out: lpFileSizeHigh=0x14dd18*=0x0) returned 0x9d26 [0059.790] ReadFile (in: hFile=0x270, lpBuffer=0x2153b18, nNumberOfBytesToRead=0x9d26, lpNumberOfBytesRead=0x14dc48, lpOverlapped=0x0 | out: lpBuffer=0x2153b18*, lpNumberOfBytesRead=0x14dc48*=0x9d26, lpOverlapped=0x0) returned 1 [0059.791] CloseHandle (hObject=0x270) returned 1 [0059.791] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\FAs-rKjbUCrz1ftREXx.rtf", nBufferLength=0x105, lpBuffer=0x14d840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\FAs-rKjbUCrz1ftREXx.rtf", lpFilePart=0x0) returned 0x72 [0059.791] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\FAs-rKjbUCrz1ftREXx.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\rhii0ypxv4yyzzvl2\\fas-rkjbucrz1ftrexx.rtf")) returned 1 [0059.793] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\FAs-rKjbUCrz1ftREXx.rtf.sad", nBufferLength=0x105, lpBuffer=0x14d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\FAs-rKjbUCrz1ftREXx.rtf.sad", lpFilePart=0x0) returned 0x76 [0059.793] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dac0) returned 1 [0059.793] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\FAs-rKjbUCrz1ftREXx.rtf.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\rhii0ypxv4yyzzvl2\\fas-rkjbucrz1ftrexx.rtf.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.794] GetFileType (hFile=0x270) returned 0x1 [0059.794] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14da30) returned 1 [0059.794] GetFileType (hFile=0x270) returned 0x1 [0059.794] WriteFile (in: hFile=0x270, lpBuffer=0x215f188*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215f188*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.795] WriteFile (in: hFile=0x270, lpBuffer=0x215f188*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215f188*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.795] WriteFile (in: hFile=0x270, lpBuffer=0x215f188*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215f188*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.796] WriteFile (in: hFile=0x270, lpBuffer=0x215f188*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215f188*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.796] WriteFile (in: hFile=0x270, lpBuffer=0x215f188*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215f188*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.796] WriteFile (in: hFile=0x270, lpBuffer=0x215f188*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215f188*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.797] WriteFile (in: hFile=0x270, lpBuffer=0x215f188*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215f188*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.797] WriteFile (in: hFile=0x270, lpBuffer=0x215f188*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215f188*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.797] WriteFile (in: hFile=0x270, lpBuffer=0x215f188*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215f188*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.798] WriteFile (in: hFile=0x270, lpBuffer=0x215f188*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215f188*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.798] WriteFile (in: hFile=0x270, lpBuffer=0x215f188*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215f188*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.798] WriteFile (in: hFile=0x270, lpBuffer=0x215f188*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215f188*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.798] WriteFile (in: hFile=0x270, lpBuffer=0x215f188*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14db28, lpOverlapped=0x0 | out: lpBuffer=0x215f188*, lpNumberOfBytesWritten=0x14db28*=0x1000, lpOverlapped=0x0) returned 1 [0059.799] WriteFile (in: hFile=0x270, lpBuffer=0x215f188*, nNumberOfBytesToWrite=0x188, lpNumberOfBytesWritten=0x14db08, lpOverlapped=0x0 | out: lpBuffer=0x215f188*, lpNumberOfBytesWritten=0x14db08*=0x188, lpOverlapped=0x0) returned 1 [0059.799] CloseHandle (hObject=0x270) returned 1 [0059.800] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0059.800] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0059.800] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.800] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0059.800] DrawTextExW (in: hdc=0x8010893, lpchText="45 Files\r\nEncrypted", cchText=19, lprc=0x14d9e8, format=0x2400, lpdtp=0x2160380 | out: lpchText="45 Files\r\nEncrypted", lprc=0x14d9e8) returned 26 [0059.800] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0059.800] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0059.800] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0059.801] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0059.801] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0059.801] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0059.801] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\mNUKqhOM.ods", nBufferLength=0x105, lpBuffer=0x14d6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\mNUKqhOM.ods", lpFilePart=0x0) returned 0x67 [0059.801] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14db80) returned 1 [0059.801] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\mNUKqhOM.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\rhii0ypxv4yyzzvl2\\mnukqhom.ods"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.801] GetFileType (hFile=0x270) returned 0x1 [0059.801] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14daf0) returned 1 [0059.801] GetFileType (hFile=0x270) returned 0x1 [0059.801] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14dd18 | out: lpFileSizeHigh=0x14dd18*=0x0) returned 0x17e64 [0059.801] ReadFile (in: hFile=0x270, lpBuffer=0x12195338, nNumberOfBytesToRead=0x17e64, lpNumberOfBytesRead=0x14dc48, lpOverlapped=0x0 | out: lpBuffer=0x12195338*, lpNumberOfBytesRead=0x14dc48*=0x17e64, lpOverlapped=0x0) returned 1 [0059.802] CloseHandle (hObject=0x270) returned 1 [0059.802] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\mNUKqhOM.ods", nBufferLength=0x105, lpBuffer=0x14d840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\mNUKqhOM.ods", lpFilePart=0x0) returned 0x67 [0059.802] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\mNUKqhOM.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\rhii0ypxv4yyzzvl2\\mnukqhom.ods")) returned 1 [0059.804] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\mNUKqhOM.ods.sad", nBufferLength=0x105, lpBuffer=0x14d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\mNUKqhOM.ods.sad", lpFilePart=0x0) returned 0x6b [0059.804] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dac0) returned 1 [0059.804] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\mNUKqhOM.ods.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\rhii0ypxv4yyzzvl2\\mnukqhom.ods.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.805] GetFileType (hFile=0x270) returned 0x1 [0059.805] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14da30) returned 1 [0059.805] GetFileType (hFile=0x270) returned 0x1 [0059.805] WriteFile (in: hFile=0x270, lpBuffer=0x21620e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21620e0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.806] WriteFile (in: hFile=0x270, lpBuffer=0x21620e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21620e0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.806] WriteFile (in: hFile=0x270, lpBuffer=0x21620e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21620e0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.807] WriteFile (in: hFile=0x270, lpBuffer=0x21620e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21620e0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.807] WriteFile (in: hFile=0x270, lpBuffer=0x21620e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21620e0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.808] WriteFile (in: hFile=0x270, lpBuffer=0x21620e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21620e0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.808] WriteFile (in: hFile=0x270, lpBuffer=0x21620e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21620e0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.808] WriteFile (in: hFile=0x270, lpBuffer=0x21620e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21620e0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.809] WriteFile (in: hFile=0x270, lpBuffer=0x21620e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21620e0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.809] WriteFile (in: hFile=0x270, lpBuffer=0x21620e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21620e0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.810] WriteFile (in: hFile=0x270, lpBuffer=0x21620e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21620e0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.810] WriteFile (in: hFile=0x270, lpBuffer=0x21620e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21620e0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.810] WriteFile (in: hFile=0x270, lpBuffer=0x21620e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21620e0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.811] WriteFile (in: hFile=0x270, lpBuffer=0x21620e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21620e0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.811] WriteFile (in: hFile=0x270, lpBuffer=0x21620e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21620e0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.811] WriteFile (in: hFile=0x270, lpBuffer=0x21620e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21620e0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.812] WriteFile (in: hFile=0x270, lpBuffer=0x21620e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21620e0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.812] WriteFile (in: hFile=0x270, lpBuffer=0x21620e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21620e0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.812] WriteFile (in: hFile=0x270, lpBuffer=0x21620e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21620e0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.812] WriteFile (in: hFile=0x270, lpBuffer=0x21620e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21620e0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.812] WriteFile (in: hFile=0x270, lpBuffer=0x21620e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21620e0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.813] WriteFile (in: hFile=0x270, lpBuffer=0x21620e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21620e0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.813] WriteFile (in: hFile=0x270, lpBuffer=0x21620e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21620e0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.813] WriteFile (in: hFile=0x270, lpBuffer=0x21620e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21620e0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.813] WriteFile (in: hFile=0x270, lpBuffer=0x21620e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21620e0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.813] WriteFile (in: hFile=0x270, lpBuffer=0x21620e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21620e0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.813] WriteFile (in: hFile=0x270, lpBuffer=0x21620e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21620e0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.814] WriteFile (in: hFile=0x270, lpBuffer=0x21620e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21620e0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.814] WriteFile (in: hFile=0x270, lpBuffer=0x21620e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21620e0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.814] WriteFile (in: hFile=0x270, lpBuffer=0x21620e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21620e0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.814] WriteFile (in: hFile=0x270, lpBuffer=0x21620e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21620e0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0059.814] WriteFile (in: hFile=0x270, lpBuffer=0x21620e0*, nNumberOfBytesToWrite=0xddc, lpNumberOfBytesWritten=0x14db08, lpOverlapped=0x0 | out: lpBuffer=0x21620e0*, lpNumberOfBytesWritten=0x14db08*=0xddc, lpOverlapped=0x0) returned 1 [0059.815] CloseHandle (hObject=0x270) returned 1 [0059.820] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0059.820] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0059.821] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.821] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0059.821] DrawTextExW (in: hdc=0x8010893, lpchText="46 Files\r\nEncrypted", cchText=19, lprc=0x14d9e8, format=0x2400, lpdtp=0x21632d8 | out: lpchText="46 Files\r\nEncrypted", lprc=0x14d9e8) returned 26 [0059.821] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0059.821] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0059.821] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0059.821] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0059.821] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0059.821] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0059.821] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0059.821] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0059.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14de60) returned 1 [0059.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2", lpFilePart=0x0) returned 0x5a [0059.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\", nBufferLength=0x105, lpBuffer=0x14d8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\", lpFilePart=0x0) returned 0x5b [0059.821] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\*", lpFindFileData=0x14db00 | out: lpFindFileData=0x14db00) returned 0xa748e0 [0059.822] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0059.822] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0059.822] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0059.822] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0059.822] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0059.822] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0059.823] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 0 [0059.823] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0059.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14ddb0) returned 1 [0059.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd70) returned 1 [0059.823] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0059.823] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0059.823] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0059.823] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0059.823] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x76 [0059.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14db70) returned 1 [0059.823] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\rhii0ypxv4yyzzvl2\\nwmzs6\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.823] GetFileType (hFile=0x270) returned 0x1 [0059.823] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dae0) returned 1 [0059.824] GetFileType (hFile=0x270) returned 0x1 [0059.824] WriteFile (in: hFile=0x270, lpBuffer=0x2166c80*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x14dbb8, lpOverlapped=0x0 | out: lpBuffer=0x2166c80*, lpNumberOfBytesWritten=0x14dbb8*=0x119, lpOverlapped=0x0) returned 1 [0059.825] CloseHandle (hObject=0x270) returned 1 [0059.825] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0059.825] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0059.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dd50) returned 1 [0059.826] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6", nBufferLength=0x105, lpBuffer=0x14d840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6", lpFilePart=0x0) returned 0x61 [0059.826] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\", nBufferLength=0x105, lpBuffer=0x14d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\", lpFilePart=0x0) returned 0x62 [0059.826] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\*", lpFindFileData=0x14d9f0 | out: lpFindFileData=0x14d9f0) returned 0xa748e0 [0059.826] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0059.826] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0059.826] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0059.827] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0059.827] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0059.827] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0059.827] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 0 [0059.827] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0059.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dca0) returned 1 [0059.827] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc60) returned 1 [0059.828] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0059.828] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0059.828] GetCurrentActCtx (in: lphActCtx=0x14dc00 | out: lphActCtx=0x14dc00*=0xa52648) returned 1 [0059.828] PeekMessageW (in: lpMsg=0x14db50, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14db50) returned 0 [0059.828] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\cmxRKR_Df0a_s.xlsx", nBufferLength=0x105, lpBuffer=0x14d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\cmxRKR_Df0a_s.xlsx", lpFilePart=0x0) returned 0x74 [0059.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14da70) returned 1 [0059.828] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\cmxRKR_Df0a_s.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\rhii0ypxv4yyzzvl2\\nwmzs6\\cmxrkr_df0a_s.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.828] GetFileType (hFile=0x270) returned 0x1 [0059.828] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d9e0) returned 1 [0059.828] GetFileType (hFile=0x270) returned 0x1 [0059.828] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14dc08 | out: lpFileSizeHigh=0x14dc08*=0x0) returned 0xba12 [0059.828] ReadFile (in: hFile=0x270, lpBuffer=0x2169fd8, nNumberOfBytesToRead=0xba12, lpNumberOfBytesRead=0x14db38, lpOverlapped=0x0 | out: lpBuffer=0x2169fd8*, lpNumberOfBytesRead=0x14db38*=0xba12, lpOverlapped=0x0) returned 1 [0059.830] CloseHandle (hObject=0x270) returned 1 [0059.830] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\cmxRKR_Df0a_s.xlsx", nBufferLength=0x105, lpBuffer=0x14d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\cmxRKR_Df0a_s.xlsx", lpFilePart=0x0) returned 0x74 [0059.830] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\cmxRKR_Df0a_s.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\rhii0ypxv4yyzzvl2\\nwmzs6\\cmxrkr_df0a_s.xlsx")) returned 1 [0059.832] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\cmxRKR_Df0a_s.xlsx.sad", nBufferLength=0x105, lpBuffer=0x14d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\cmxRKR_Df0a_s.xlsx.sad", lpFilePart=0x0) returned 0x78 [0059.832] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14d9b0) returned 1 [0059.832] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\cmxRKR_Df0a_s.xlsx.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\rhii0ypxv4yyzzvl2\\nwmzs6\\cmxrkr_df0a_s.xlsx.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.833] GetFileType (hFile=0x270) returned 0x1 [0059.833] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d920) returned 1 [0059.833] GetFileType (hFile=0x270) returned 0x1 [0059.833] WriteFile (in: hFile=0x270, lpBuffer=0x2177348*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14da98, lpOverlapped=0x0 | out: lpBuffer=0x2177348*, lpNumberOfBytesWritten=0x14da98*=0x1000, lpOverlapped=0x0) returned 1 [0059.834] WriteFile (in: hFile=0x270, lpBuffer=0x2177348*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14da98, lpOverlapped=0x0 | out: lpBuffer=0x2177348*, lpNumberOfBytesWritten=0x14da98*=0x1000, lpOverlapped=0x0) returned 1 [0059.835] WriteFile (in: hFile=0x270, lpBuffer=0x2177348*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14da98, lpOverlapped=0x0 | out: lpBuffer=0x2177348*, lpNumberOfBytesWritten=0x14da98*=0x1000, lpOverlapped=0x0) returned 1 [0059.835] WriteFile (in: hFile=0x270, lpBuffer=0x2177348*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14da98, lpOverlapped=0x0 | out: lpBuffer=0x2177348*, lpNumberOfBytesWritten=0x14da98*=0x1000, lpOverlapped=0x0) returned 1 [0059.835] WriteFile (in: hFile=0x270, lpBuffer=0x2177348*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14da98, lpOverlapped=0x0 | out: lpBuffer=0x2177348*, lpNumberOfBytesWritten=0x14da98*=0x1000, lpOverlapped=0x0) returned 1 [0059.835] WriteFile (in: hFile=0x270, lpBuffer=0x2177348*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14da98, lpOverlapped=0x0 | out: lpBuffer=0x2177348*, lpNumberOfBytesWritten=0x14da98*=0x1000, lpOverlapped=0x0) returned 1 [0059.836] WriteFile (in: hFile=0x270, lpBuffer=0x2177348*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14da98, lpOverlapped=0x0 | out: lpBuffer=0x2177348*, lpNumberOfBytesWritten=0x14da98*=0x1000, lpOverlapped=0x0) returned 1 [0059.836] WriteFile (in: hFile=0x270, lpBuffer=0x2177348*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14da98, lpOverlapped=0x0 | out: lpBuffer=0x2177348*, lpNumberOfBytesWritten=0x14da98*=0x1000, lpOverlapped=0x0) returned 1 [0059.836] WriteFile (in: hFile=0x270, lpBuffer=0x2177348*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14da98, lpOverlapped=0x0 | out: lpBuffer=0x2177348*, lpNumberOfBytesWritten=0x14da98*=0x1000, lpOverlapped=0x0) returned 1 [0059.836] WriteFile (in: hFile=0x270, lpBuffer=0x2177348*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14da98, lpOverlapped=0x0 | out: lpBuffer=0x2177348*, lpNumberOfBytesWritten=0x14da98*=0x1000, lpOverlapped=0x0) returned 1 [0059.837] WriteFile (in: hFile=0x270, lpBuffer=0x2177348*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14da98, lpOverlapped=0x0 | out: lpBuffer=0x2177348*, lpNumberOfBytesWritten=0x14da98*=0x1000, lpOverlapped=0x0) returned 1 [0059.837] WriteFile (in: hFile=0x270, lpBuffer=0x2177348*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14da98, lpOverlapped=0x0 | out: lpBuffer=0x2177348*, lpNumberOfBytesWritten=0x14da98*=0x1000, lpOverlapped=0x0) returned 1 [0059.837] WriteFile (in: hFile=0x270, lpBuffer=0x2177348*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14da98, lpOverlapped=0x0 | out: lpBuffer=0x2177348*, lpNumberOfBytesWritten=0x14da98*=0x1000, lpOverlapped=0x0) returned 1 [0059.837] WriteFile (in: hFile=0x270, lpBuffer=0x2177348*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14da98, lpOverlapped=0x0 | out: lpBuffer=0x2177348*, lpNumberOfBytesWritten=0x14da98*=0x1000, lpOverlapped=0x0) returned 1 [0059.838] WriteFile (in: hFile=0x270, lpBuffer=0x2177348*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14da98, lpOverlapped=0x0 | out: lpBuffer=0x2177348*, lpNumberOfBytesWritten=0x14da98*=0x1000, lpOverlapped=0x0) returned 1 [0059.838] WriteFile (in: hFile=0x270, lpBuffer=0x2177348*, nNumberOfBytesToWrite=0x818, lpNumberOfBytesWritten=0x14d9f8, lpOverlapped=0x0 | out: lpBuffer=0x2177348*, lpNumberOfBytesWritten=0x14d9f8*=0x818, lpOverlapped=0x0) returned 1 [0059.838] CloseHandle (hObject=0x270) returned 1 [0059.843] GetCurrentActCtx (in: lphActCtx=0x14dc00 | out: lphActCtx=0x14dc00*=0xa52648) returned 1 [0059.843] PeekMessageW (in: lpMsg=0x14db50, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14db50) returned 0 [0059.843] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.843] AdjustWindowRectEx (in: lpRect=0x14d968, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d968) returned 1 [0059.843] DrawTextExW (in: hdc=0x8010893, lpchText="47 Files\r\nEncrypted", cchText=19, lprc=0x14d8d8, format=0x2400, lpdtp=0x2178540 | out: lpchText="47 Files\r\nEncrypted", lprc=0x14d8d8) returned 26 [0059.844] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0059.844] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0059.844] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0059.844] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0059.844] GetCurrentActCtx (in: lphActCtx=0x14dc00 | out: lphActCtx=0x14dc00*=0xa52648) returned 1 [0059.844] PeekMessageW (in: lpMsg=0x14db50, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14db50) returned 0 [0059.844] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\KcGC1Qy.ods", nBufferLength=0x105, lpBuffer=0x14d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\KcGC1Qy.ods", lpFilePart=0x0) returned 0x6d [0059.844] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14da70) returned 1 [0059.844] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\KcGC1Qy.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\rhii0ypxv4yyzzvl2\\nwmzs6\\kcgc1qy.ods"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.845] GetFileType (hFile=0x270) returned 0x1 [0059.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d9e0) returned 1 [0059.845] GetFileType (hFile=0x270) returned 0x1 [0059.845] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14dc08 | out: lpFileSizeHigh=0x14dc08*=0x0) returned 0x3f93 [0059.845] ReadFile (in: hFile=0x270, lpBuffer=0x21789c8, nNumberOfBytesToRead=0x3f93, lpNumberOfBytesRead=0x14db38, lpOverlapped=0x0 | out: lpBuffer=0x21789c8*, lpNumberOfBytesRead=0x14db38*=0x3f93, lpOverlapped=0x0) returned 1 [0059.846] CloseHandle (hObject=0x270) returned 1 [0059.846] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\KcGC1Qy.ods", nBufferLength=0x105, lpBuffer=0x14d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\KcGC1Qy.ods", lpFilePart=0x0) returned 0x6d [0059.846] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\KcGC1Qy.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\rhii0ypxv4yyzzvl2\\nwmzs6\\kcgc1qy.ods")) returned 1 [0059.848] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\KcGC1Qy.ods.sad", nBufferLength=0x105, lpBuffer=0x14d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\KcGC1Qy.ods.sad", lpFilePart=0x0) returned 0x71 [0059.848] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14d9b0) returned 1 [0059.849] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\KcGC1Qy.ods.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\rhii0ypxv4yyzzvl2\\nwmzs6\\kcgc1qy.ods.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.849] GetFileType (hFile=0x270) returned 0x1 [0059.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d920) returned 1 [0059.849] GetFileType (hFile=0x270) returned 0x1 [0059.849] WriteFile (in: hFile=0x270, lpBuffer=0x2188c20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14da98, lpOverlapped=0x0 | out: lpBuffer=0x2188c20*, lpNumberOfBytesWritten=0x14da98*=0x1000, lpOverlapped=0x0) returned 1 [0059.851] WriteFile (in: hFile=0x270, lpBuffer=0x2188c20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14da98, lpOverlapped=0x0 | out: lpBuffer=0x2188c20*, lpNumberOfBytesWritten=0x14da98*=0x1000, lpOverlapped=0x0) returned 1 [0059.852] WriteFile (in: hFile=0x270, lpBuffer=0x2188c20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14da98, lpOverlapped=0x0 | out: lpBuffer=0x2188c20*, lpNumberOfBytesWritten=0x14da98*=0x1000, lpOverlapped=0x0) returned 1 [0059.852] WriteFile (in: hFile=0x270, lpBuffer=0x2188c20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14da98, lpOverlapped=0x0 | out: lpBuffer=0x2188c20*, lpNumberOfBytesWritten=0x14da98*=0x1000, lpOverlapped=0x0) returned 1 [0059.852] WriteFile (in: hFile=0x270, lpBuffer=0x2188c20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14da98, lpOverlapped=0x0 | out: lpBuffer=0x2188c20*, lpNumberOfBytesWritten=0x14da98*=0x1000, lpOverlapped=0x0) returned 1 [0059.852] WriteFile (in: hFile=0x270, lpBuffer=0x2188c20*, nNumberOfBytesToWrite=0x4c4, lpNumberOfBytesWritten=0x14d9f8, lpOverlapped=0x0 | out: lpBuffer=0x2188c20*, lpNumberOfBytesWritten=0x14d9f8*=0x4c4, lpOverlapped=0x0) returned 1 [0059.854] GetCurrentActCtx (in: lphActCtx=0x14dc00 | out: lphActCtx=0x14dc00*=0xa52648) returned 1 [0059.854] PeekMessageW (in: lpMsg=0x14db50, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14db50) returned 0 [0059.854] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.854] AdjustWindowRectEx (in: lpRect=0x14d968, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d968) returned 1 [0059.854] DrawTextExW (in: hdc=0x8010893, lpchText="48 Files\r\nEncrypted", cchText=19, lprc=0x14d8d8, format=0x2400, lpdtp=0x2189e18 | out: lpchText="48 Files\r\nEncrypted", lprc=0x14d8d8) returned 26 [0059.854] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0059.854] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0059.854] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0059.854] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0059.854] GetCurrentActCtx (in: lphActCtx=0x14dc00 | out: lphActCtx=0x14dc00*=0xa52648) returned 1 [0059.854] PeekMessageW (in: lpMsg=0x14db50, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14db50) returned 0 [0059.854] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\Leiut0mmT4.csv", nBufferLength=0x105, lpBuffer=0x14d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\Leiut0mmT4.csv", lpFilePart=0x0) returned 0x70 [0059.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14da70) returned 1 [0059.855] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\Leiut0mmT4.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\rhii0ypxv4yyzzvl2\\nwmzs6\\leiut0mmt4.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d9e0) returned 1 [0059.855] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14dc08 | out: lpFileSizeHigh=0x14dc08*=0x0) returned 0x14a34 [0059.855] ReadFile (in: hFile=0x270, lpBuffer=0x218a2b8, nNumberOfBytesToRead=0x14a34, lpNumberOfBytesRead=0x14db38, lpOverlapped=0x0 | out: lpBuffer=0x218a2b8*, lpNumberOfBytesRead=0x14db38*=0x14a34, lpOverlapped=0x0) returned 1 [0059.857] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\Leiut0mmT4.csv", nBufferLength=0x105, lpBuffer=0x14d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\Leiut0mmT4.csv", lpFilePart=0x0) returned 0x70 [0059.857] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\Leiut0mmT4.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\rhii0ypxv4yyzzvl2\\nwmzs6\\leiut0mmt4.csv")) returned 1 [0059.859] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\Leiut0mmT4.csv.sad", nBufferLength=0x105, lpBuffer=0x14d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\Leiut0mmT4.csv.sad", lpFilePart=0x0) returned 0x74 [0059.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14d9b0) returned 1 [0059.860] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\Leiut0mmT4.csv.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\rhii0ypxv4yyzzvl2\\nwmzs6\\leiut0mmt4.csv.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d920) returned 1 [0059.863] GetCurrentActCtx (in: lphActCtx=0x14dc00 | out: lphActCtx=0x14dc00*=0xa52648) returned 1 [0059.864] PeekMessageW (in: lpMsg=0x14db50, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14db50) returned 0 [0059.864] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.864] AdjustWindowRectEx (in: lpRect=0x14d968, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d968) returned 1 [0059.864] DrawTextExW (in: hdc=0x8010893, lpchText="49 Files\r\nEncrypted", cchText=19, lprc=0x14d8d8, format=0x2400, lpdtp=0x21a1820 | out: lpchText="49 Files\r\nEncrypted", lprc=0x14d8d8) returned 26 [0059.864] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0059.864] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0059.864] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0059.864] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0059.864] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0059.864] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0059.864] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0059.864] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0059.864] GetCurrentActCtx (in: lphActCtx=0x14dc00 | out: lphActCtx=0x14dc00*=0xa52648) returned 1 [0059.864] PeekMessageW (in: lpMsg=0x14db50, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14db50) returned 0 [0059.864] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\xlKip41L.ppt", nBufferLength=0x105, lpBuffer=0x14d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\xlKip41L.ppt", lpFilePart=0x0) returned 0x6e [0059.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14da70) returned 1 [0059.865] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\xlKip41L.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\rhii0ypxv4yyzzvl2\\nwmzs6\\xlkip41l.ppt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d9e0) returned 1 [0059.865] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14dc08 | out: lpFileSizeHigh=0x14dc08*=0x0) returned 0x154a3 [0059.865] ReadFile (in: hFile=0x270, lpBuffer=0x12242f10, nNumberOfBytesToRead=0x154a3, lpNumberOfBytesRead=0x14db38, lpOverlapped=0x0 | out: lpBuffer=0x12242f10*, lpNumberOfBytesRead=0x14db38*=0x154a3, lpOverlapped=0x0) returned 1 [0059.866] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\xlKip41L.ppt", nBufferLength=0x105, lpBuffer=0x14d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\xlKip41L.ppt", lpFilePart=0x0) returned 0x6e [0059.866] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\xlKip41L.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\rhii0ypxv4yyzzvl2\\nwmzs6\\xlkip41l.ppt")) returned 1 [0059.868] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\xlKip41L.ppt.sad", nBufferLength=0x105, lpBuffer=0x14d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\xlKip41L.ppt.sad", lpFilePart=0x0) returned 0x72 [0059.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14d9b0) returned 1 [0059.868] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\xlKip41L.ppt.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\rhii0ypxv4yyzzvl2\\nwmzs6\\xlkip41l.ppt.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d920) returned 1 [0059.872] GetCurrentActCtx (in: lphActCtx=0x14dc00 | out: lphActCtx=0x14dc00*=0xa52648) returned 1 [0059.872] PeekMessageW (in: lpMsg=0x14db50, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14db50) returned 0 [0059.872] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.872] AdjustWindowRectEx (in: lpRect=0x14d968, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d968) returned 1 [0059.872] DrawTextExW (in: hdc=0x8010893, lpchText="50 Files\r\nEncrypted", cchText=19, lprc=0x14d8d8, format=0x2400, lpdtp=0x21a49c0 | out: lpchText="50 Files\r\nEncrypted", lprc=0x14d8d8) returned 26 [0059.872] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0059.872] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0059.872] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0059.872] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0059.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dd50) returned 1 [0059.872] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6", nBufferLength=0x105, lpBuffer=0x14d840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6", lpFilePart=0x0) returned 0x61 [0059.872] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\", nBufferLength=0x105, lpBuffer=0x14d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\", lpFilePart=0x0) returned 0x62 [0059.873] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\RHii0YPXv4yyzZvl2\\NwmZS6\\*", lpFindFileData=0x14d9f0 | out: lpFindFileData=0x14d9f0) returned 0xa748e0 [0059.873] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0059.873] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0059.873] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0059.873] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0059.873] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0059.873] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0059.874] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 0 [0059.874] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0059.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dca0) returned 1 [0059.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc60) returned 1 [0059.874] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0059.874] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0059.874] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0059.874] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0059.874] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0059.874] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0059.874] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.874] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.874] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.874] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.874] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0059.874] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0059.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14d7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x67 [0059.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc80) returned 1 [0059.874] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\y6859h6ig\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dbf0) returned 1 [0059.876] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0059.876] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0059.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14de60) returned 1 [0059.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG", lpFilePart=0x0) returned 0x52 [0059.876] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\", nBufferLength=0x105, lpBuffer=0x14d8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\", lpFilePart=0x0) returned 0x53 [0059.876] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\*", lpFindFileData=0x14db00 | out: lpFindFileData=0x14db00) returned 0xa748e0 [0059.876] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0059.876] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0059.876] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0059.876] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0059.877] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0059.877] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0059.877] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 0 [0059.877] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0059.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14ddb0) returned 1 [0059.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd70) returned 1 [0059.877] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0059.877] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0059.877] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0059.877] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0059.877] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\7s_O6mV480oi2tHxmr.doc", nBufferLength=0x105, lpBuffer=0x14d6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\7s_O6mV480oi2tHxmr.doc", lpFilePart=0x0) returned 0x69 [0059.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14db80) returned 1 [0059.877] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\7s_O6mV480oi2tHxmr.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\y6859h6ig\\7s_o6mv480oi2thxmr.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14daf0) returned 1 [0059.878] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14dd18 | out: lpFileSizeHigh=0x14dd18*=0x0) returned 0x42f8 [0059.878] ReadFile (in: hFile=0x270, lpBuffer=0x21ab6a8, nNumberOfBytesToRead=0x42f8, lpNumberOfBytesRead=0x14dc48, lpOverlapped=0x0 | out: lpBuffer=0x21ab6a8*, lpNumberOfBytesRead=0x14dc48*=0x42f8, lpOverlapped=0x0) returned 1 [0059.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\7s_O6mV480oi2tHxmr.doc", nBufferLength=0x105, lpBuffer=0x14d840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\7s_O6mV480oi2tHxmr.doc", lpFilePart=0x0) returned 0x69 [0059.879] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\7s_O6mV480oi2tHxmr.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\y6859h6ig\\7s_o6mv480oi2thxmr.doc")) returned 1 [0059.880] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\7s_O6mV480oi2tHxmr.doc.sad", nBufferLength=0x105, lpBuffer=0x14d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\7s_O6mV480oi2tHxmr.doc.sad", lpFilePart=0x0) returned 0x6d [0059.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dac0) returned 1 [0059.880] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\7s_O6mV480oi2tHxmr.doc.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\y6859h6ig\\7s_o6mv480oi2thxmr.doc.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14da30) returned 1 [0059.882] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0059.882] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0059.882] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.882] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0059.882] DrawTextExW (in: hdc=0x8010893, lpchText="51 Files\r\nEncrypted", cchText=19, lprc=0x14d9e8, format=0x2400, lpdtp=0x21bd768 | out: lpchText="51 Files\r\nEncrypted", lprc=0x14d9e8) returned 26 [0059.883] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0059.883] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0059.883] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0059.883] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0059.883] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0059.883] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0059.883] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\R6f1DA9 iCKxyKr.pps", nBufferLength=0x105, lpBuffer=0x14d6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\R6f1DA9 iCKxyKr.pps", lpFilePart=0x0) returned 0x66 [0059.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14db80) returned 1 [0059.883] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\R6f1DA9 iCKxyKr.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\y6859h6ig\\r6f1da9 ickxykr.pps"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14daf0) returned 1 [0059.883] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14dd18 | out: lpFileSizeHigh=0x14dd18*=0x0) returned 0xbf56 [0059.883] ReadFile (in: hFile=0x270, lpBuffer=0x21bdc00, nNumberOfBytesToRead=0xbf56, lpNumberOfBytesRead=0x14dc48, lpOverlapped=0x0 | out: lpBuffer=0x21bdc00*, lpNumberOfBytesRead=0x14dc48*=0xbf56, lpOverlapped=0x0) returned 1 [0059.884] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\R6f1DA9 iCKxyKr.pps", nBufferLength=0x105, lpBuffer=0x14d840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\R6f1DA9 iCKxyKr.pps", lpFilePart=0x0) returned 0x66 [0059.884] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\R6f1DA9 iCKxyKr.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\y6859h6ig\\r6f1da9 ickxykr.pps")) returned 1 [0059.886] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\R6f1DA9 iCKxyKr.pps.sad", nBufferLength=0x105, lpBuffer=0x14d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\R6f1DA9 iCKxyKr.pps.sad", lpFilePart=0x0) returned 0x6a [0059.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dac0) returned 1 [0059.886] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\R6f1DA9 iCKxyKr.pps.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\y6859h6ig\\r6f1da9 ickxykr.pps.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14da30) returned 1 [0059.889] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0059.889] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0059.889] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.889] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0059.889] DrawTextExW (in: hdc=0x8010893, lpchText="52 Files\r\nEncrypted", cchText=19, lprc=0x14d9e8, format=0x2400, lpdtp=0x21cc648 | out: lpchText="52 Files\r\nEncrypted", lprc=0x14d9e8) returned 26 [0059.889] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0059.889] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0059.889] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0059.889] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0059.890] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0059.890] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0059.890] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0059.890] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0059.890] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0059.890] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0059.890] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\xw4hQHNtN.docx", nBufferLength=0x105, lpBuffer=0x14d6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\xw4hQHNtN.docx", lpFilePart=0x0) returned 0x61 [0059.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14db80) returned 1 [0059.890] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\xw4hQHNtN.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\y6859h6ig\\xw4hqhntn.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14daf0) returned 1 [0059.890] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14dd18 | out: lpFileSizeHigh=0x14dd18*=0x0) returned 0xa486 [0059.890] ReadFile (in: hFile=0x270, lpBuffer=0x21cccd0, nNumberOfBytesToRead=0xa486, lpNumberOfBytesRead=0x14dc48, lpOverlapped=0x0 | out: lpBuffer=0x21cccd0*, lpNumberOfBytesRead=0x14dc48*=0xa486, lpOverlapped=0x0) returned 1 [0059.891] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\xw4hQHNtN.docx", nBufferLength=0x105, lpBuffer=0x14d840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\xw4hQHNtN.docx", lpFilePart=0x0) returned 0x61 [0059.891] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\xw4hQHNtN.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\y6859h6ig\\xw4hqhntn.docx")) returned 1 [0059.893] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\xw4hQHNtN.docx.sad", nBufferLength=0x105, lpBuffer=0x14d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\xw4hQHNtN.docx.sad", lpFilePart=0x0) returned 0x65 [0059.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dac0) returned 1 [0059.893] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\xw4hQHNtN.docx.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\y6859h6ig\\xw4hqhntn.docx.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14da30) returned 1 [0059.895] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0059.895] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0059.895] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.896] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0059.896] DrawTextExW (in: hdc=0x8010893, lpchText="53 Files\r\nEncrypted", cchText=19, lprc=0x14d9e8, format=0x2400, lpdtp=0x21d9c28 | out: lpchText="53 Files\r\nEncrypted", lprc=0x14d9e8) returned 26 [0059.896] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0059.896] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0059.896] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0059.896] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0059.896] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0059.896] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0059.896] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\z1oWRT JXeyeHNCsxj-.rtf", nBufferLength=0x105, lpBuffer=0x14d6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\z1oWRT JXeyeHNCsxj-.rtf", lpFilePart=0x0) returned 0x6a [0059.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14db80) returned 1 [0059.896] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\z1oWRT JXeyeHNCsxj-.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\y6859h6ig\\z1owrt jxeyehncsxj-.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0059.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14daf0) returned 1 [0059.896] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14dd18 | out: lpFileSizeHigh=0x14dd18*=0x0) returned 0xfe4 [0059.896] ReadFile (in: hFile=0x270, lpBuffer=0x21db0d8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14dc48, lpOverlapped=0x0 | out: lpBuffer=0x21db0d8*, lpNumberOfBytesRead=0x14dc48*=0xfe4, lpOverlapped=0x0) returned 1 [0059.897] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\z1oWRT JXeyeHNCsxj-.rtf", nBufferLength=0x105, lpBuffer=0x14d840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\z1oWRT JXeyeHNCsxj-.rtf", lpFilePart=0x0) returned 0x6a [0059.897] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\z1oWRT JXeyeHNCsxj-.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\y6859h6ig\\z1owrt jxeyehncsxj-.rtf")) returned 1 [0059.899] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\z1oWRT JXeyeHNCsxj-.rtf.sad", nBufferLength=0x105, lpBuffer=0x14d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\z1oWRT JXeyeHNCsxj-.rtf.sad", lpFilePart=0x0) returned 0x6e [0059.899] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dac0) returned 1 [0059.899] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\z1oWRT JXeyeHNCsxj-.rtf.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\mx5gei4q09m\\untaxj-fzquz0pgm1dg8\\y6859h6ig\\z1owrt jxeyehncsxj-.rtf.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.899] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14da30) returned 1 [0059.900] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0059.900] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0059.901] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0059.901] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0059.901] DrawTextExW (in: hdc=0x8010893, lpchText="54 Files\r\nEncrypted", cchText=19, lprc=0x14d9e8, format=0x2400, lpdtp=0x21e1668 | out: lpchText="54 Files\r\nEncrypted", lprc=0x14d9e8) returned 26 [0059.901] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0059.901] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0059.901] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0059.901] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0059.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14de60) returned 1 [0059.901] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG", lpFilePart=0x0) returned 0x52 [0059.901] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\", nBufferLength=0x105, lpBuffer=0x14d8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\", lpFilePart=0x0) returned 0x53 [0059.901] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\MX5gEI4Q09m\\uNTAxJ-FzqUZ0PGM1DG8\\Y6859h6iG\\*", lpFindFileData=0x14db00 | out: lpFindFileData=0x14db00) returned 0xa748e0 [0059.901] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0059.901] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0059.902] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0059.902] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0059.902] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0059.902] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0059.902] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 0 [0059.902] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0059.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14ddb0) returned 1 [0059.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd70) returned 1 [0059.902] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0059.902] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0059.902] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.903] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.903] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0059.903] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0059.903] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0059.903] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0059.903] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0059.903] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0059.903] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.903] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.903] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0059.903] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0059.904] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0059.904] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0059.904] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14d9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x45 [0059.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dea0) returned 1 [0059.904] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my music\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0059.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de10) returned 1 [0059.905] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0059.905] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0059.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e080) returned 1 [0059.905] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", lpFilePart=0x0) returned 0x30 [0059.905] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\", nBufferLength=0x105, lpBuffer=0x14db10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\", lpFilePart=0x0) returned 0x31 [0059.905] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\*", lpFindFileData=0x14dd20 | out: lpFindFileData=0x14dd20) returned 0xffffffffffffffff [0059.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dfb0) returned 1 [0059.993] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0059.993] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0059.993] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0059.993] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.028] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.028] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e080) returned 1 [0060.028] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music", lpFilePart=0x0) returned 0x30 [0060.028] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\", nBufferLength=0x105, lpBuffer=0x14db10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\", lpFilePart=0x0) returned 0x31 [0060.028] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\*", lpFindFileData=0x14dd20 | out: lpFindFileData=0x14dd20) returned 0xffffffffffffffff [0060.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dfb0) returned 1 [0060.030] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.030] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.030] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.030] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.031] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.031] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.031] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0060.031] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0060.031] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0060.031] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0060.031] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.031] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.031] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14d9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x48 [0060.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dea0) returned 1 [0060.032] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my pictures\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.032] GetFileType (hFile=0x270) returned 0x1 [0060.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de10) returned 1 [0060.032] GetFileType (hFile=0x270) returned 0x1 [0060.032] WriteFile (in: hFile=0x270, lpBuffer=0x21ed0c0*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x14dee8, lpOverlapped=0x0 | out: lpBuffer=0x21ed0c0*, lpNumberOfBytesWritten=0x14dee8*=0x119, lpOverlapped=0x0) returned 1 [0060.033] CloseHandle (hObject=0x270) returned 1 [0060.034] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.034] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e080) returned 1 [0060.034] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", lpFilePart=0x0) returned 0x33 [0060.034] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\", nBufferLength=0x105, lpBuffer=0x14db10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\", lpFilePart=0x0) returned 0x34 [0060.034] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\*", lpFindFileData=0x14dd20 | out: lpFindFileData=0x14dd20) returned 0xffffffffffffffff [0060.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dfb0) returned 1 [0060.037] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.037] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.038] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.038] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.039] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.039] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e080) returned 1 [0060.039] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures", lpFilePart=0x0) returned 0x33 [0060.039] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\", nBufferLength=0x105, lpBuffer=0x14db10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\", lpFilePart=0x0) returned 0x34 [0060.039] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\*", lpFindFileData=0x14dd20 | out: lpFindFileData=0x14dd20) returned 0xffffffffffffffff [0060.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dfb0) returned 1 [0060.042] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.042] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.042] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.042] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.044] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.044] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.044] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0060.044] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0060.044] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0060.044] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0060.045] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.045] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.045] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14d9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x46 [0060.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dea0) returned 1 [0060.045] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.049] GetFileType (hFile=0x270) returned 0x1 [0060.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de10) returned 1 [0060.049] GetFileType (hFile=0x270) returned 0x1 [0060.050] WriteFile (in: hFile=0x270, lpBuffer=0x21f1e28*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x14dee8, lpOverlapped=0x0 | out: lpBuffer=0x21f1e28*, lpNumberOfBytesWritten=0x14dee8*=0x119, lpOverlapped=0x0) returned 1 [0060.050] CloseHandle (hObject=0x270) returned 1 [0060.051] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.051] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.051] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e080) returned 1 [0060.051] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31 [0060.051] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\", nBufferLength=0x105, lpBuffer=0x14db10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\", lpFilePart=0x0) returned 0x32 [0060.051] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*", lpFindFileData=0x14dd20 | out: lpFindFileData=0x14dd20) returned 0xa748e0 [0060.051] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.052] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.052] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.052] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.052] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.052] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 0 [0060.052] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0060.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dfd0) returned 1 [0060.052] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14df90) returned 1 [0060.052] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.053] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.053] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0060.053] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0060.053] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\desktop.ini", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\desktop.ini", lpFilePart=0x0) returned 0x3d [0060.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0060.053] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.054] GetFileType (hFile=0x270) returned 0x1 [0060.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0060.054] GetFileType (hFile=0x270) returned 0x1 [0060.054] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0xd8 [0060.054] ReadFile (in: hFile=0x270, lpBuffer=0x21f4650, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x21f4650*, lpNumberOfBytesRead=0x14de68*=0xd8, lpOverlapped=0x0) returned 1 [0060.055] CloseHandle (hObject=0x270) returned 1 [0060.055] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\desktop.ini", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\desktop.ini", lpFilePart=0x0) returned 0x3d [0060.055] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\desktop.ini")) returned 1 [0060.056] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\desktop.ini.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\desktop.ini.sad", lpFilePart=0x0) returned 0x41 [0060.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0060.056] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\desktop.ini.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\desktop.ini.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.057] GetFileType (hFile=0x270) returned 0x1 [0060.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0060.057] GetFileType (hFile=0x270) returned 0x1 [0060.057] WriteFile (in: hFile=0x270, lpBuffer=0x21f70a8*, nNumberOfBytesToWrite=0x120, lpNumberOfBytesWritten=0x14dd28, lpOverlapped=0x0 | out: lpBuffer=0x21f70a8*, lpNumberOfBytesWritten=0x14dd28*=0x120, lpOverlapped=0x0) returned 1 [0060.058] CloseHandle (hObject=0x270) returned 1 [0060.063] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0060.063] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0060.063] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.063] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0060.063] DrawTextExW (in: hdc=0x8010893, lpchText="55 Files\r\nEncrypted", cchText=19, lprc=0x14dc08, format=0x2400, lpdtp=0x21f82a0 | out: lpchText="55 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0060.063] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.063] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.063] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.063] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.063] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0060.063] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0060.064] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss", lpFilePart=0x0) returned 0x3f [0060.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0060.064] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\favorites.vss"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.065] GetFileType (hFile=0x270) returned 0x1 [0060.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0060.065] GetFileType (hFile=0x270) returned 0x1 [0060.065] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x0 [0060.065] CloseHandle (hObject=0x270) returned 1 [0060.067] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss", lpFilePart=0x0) returned 0x3f [0060.067] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\favorites.vss")) returned 1 [0060.068] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss.sad", lpFilePart=0x0) returned 0x43 [0060.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0060.068] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\favorites.vss.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.068] GetFileType (hFile=0x270) returned 0x1 [0060.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0060.068] GetFileType (hFile=0x270) returned 0x1 [0060.068] CloseHandle (hObject=0x270) returned 1 [0060.069] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0060.069] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0060.069] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.069] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0060.069] DrawTextExW (in: hdc=0x8010893, lpchText="56 Files\r\nEncrypted", cchText=19, lprc=0x14dc08, format=0x2400, lpdtp=0x21fa0b8 | out: lpchText="56 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0060.069] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.069] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.069] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.069] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.069] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.070] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.070] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.070] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e080) returned 1 [0060.070] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes", lpFilePart=0x0) returned 0x31 [0060.070] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\", nBufferLength=0x105, lpBuffer=0x14db10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\", lpFilePart=0x0) returned 0x32 [0060.070] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*", lpFindFileData=0x14dd20 | out: lpFindFileData=0x14dd20) returned 0xa748e0 [0060.070] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.070] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.070] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.071] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.071] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.071] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 0 [0060.071] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0060.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dfd0) returned 1 [0060.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14df90) returned 1 [0060.071] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.071] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.071] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0060.071] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0060.071] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x4f [0060.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dd90) returned 1 [0060.071] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.072] GetFileType (hFile=0x270) returned 0x1 [0060.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd00) returned 1 [0060.073] GetFileType (hFile=0x270) returned 0x1 [0060.073] WriteFile (in: hFile=0x270, lpBuffer=0x21fcfc0*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x14ddd8, lpOverlapped=0x0 | out: lpBuffer=0x21fcfc0*, lpNumberOfBytesWritten=0x14ddd8*=0x119, lpOverlapped=0x0) returned 1 [0060.074] CloseHandle (hObject=0x270) returned 1 [0060.074] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0060.074] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0060.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14df70) returned 1 [0060.074] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a [0060.074] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\", nBufferLength=0x105, lpBuffer=0x14da00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\", lpFilePart=0x0) returned 0x3b [0060.074] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x14dc10 | out: lpFindFileData=0x14dc10) returned 0xa748e0 [0060.074] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0060.075] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0060.075] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0060.075] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 0 [0060.075] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0060.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dec0) returned 1 [0060.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de80) returned 1 [0060.075] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0060.075] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0060.075] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0060.075] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0060.075] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico", lpFilePart=0x0) returned 0x45 [0060.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0060.076] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.077] GetFileType (hFile=0x270) returned 0x1 [0060.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0060.077] GetFileType (hFile=0x270) returned 0x1 [0060.077] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x74e6 [0060.077] ReadFile (in: hFile=0x270, lpBuffer=0x21ff488, nNumberOfBytesToRead=0x74e6, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x21ff488*, lpNumberOfBytesRead=0x14dd58*=0x74e6, lpOverlapped=0x0) returned 1 [0060.087] CloseHandle (hObject=0x270) returned 1 [0060.087] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico", lpFilePart=0x0) returned 0x45 [0060.087] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico")) returned 1 [0060.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico.sad", lpFilePart=0x0) returned 0x49 [0060.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0060.088] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.089] GetFileType (hFile=0x270) returned 0x1 [0060.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0060.089] GetFileType (hFile=0x270) returned 0x1 [0060.089] WriteFile (in: hFile=0x270, lpBuffer=0x221b978*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x221b978*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.090] WriteFile (in: hFile=0x270, lpBuffer=0x221b978*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x221b978*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.091] WriteFile (in: hFile=0x270, lpBuffer=0x221b978*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x221b978*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.091] WriteFile (in: hFile=0x270, lpBuffer=0x221b978*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x221b978*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.091] WriteFile (in: hFile=0x270, lpBuffer=0x221b978*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x221b978*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.092] WriteFile (in: hFile=0x270, lpBuffer=0x221b978*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x221b978*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.092] WriteFile (in: hFile=0x270, lpBuffer=0x221b978*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x221b978*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.092] WriteFile (in: hFile=0x270, lpBuffer=0x221b978*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x221b978*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.093] WriteFile (in: hFile=0x270, lpBuffer=0x221b978*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x221b978*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.093] WriteFile (in: hFile=0x270, lpBuffer=0x221b978*, nNumberOfBytesToWrite=0xbe0, lpNumberOfBytesWritten=0x14dc18, lpOverlapped=0x0 | out: lpBuffer=0x221b978*, lpNumberOfBytesWritten=0x14dc18*=0xbe0, lpOverlapped=0x0) returned 1 [0060.093] CloseHandle (hObject=0x270) returned 1 [0060.094] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0060.094] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0060.094] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.094] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0060.094] DrawTextExW (in: hdc=0x8010893, lpchText="57 Files\r\nEncrypted", cchText=19, lprc=0x14daf8, format=0x2400, lpdtp=0x221cb70 | out: lpchText="57 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0060.095] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0060.095] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0060.095] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0060.095] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0060.095] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0060.095] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0060.095] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0060.095] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0060.095] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14df70) returned 1 [0060.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private", lpFilePart=0x0) returned 0x3a [0060.095] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\", nBufferLength=0x105, lpBuffer=0x14da00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\", lpFilePart=0x0) returned 0x3b [0060.095] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x14dc10 | out: lpFindFileData=0x14dc10) returned 0xa748e0 [0060.095] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0060.095] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0060.095] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0060.096] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 0 [0060.096] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0060.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dec0) returned 1 [0060.096] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de80) returned 1 [0060.096] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0060.096] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0060.096] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.096] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.096] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.096] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.096] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0060.096] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0060.096] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0060.096] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0060.096] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.096] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.096] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14d9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x46 [0060.096] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dea0) returned 1 [0060.097] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my videos\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.097] GetFileType (hFile=0x270) returned 0x1 [0060.097] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de10) returned 1 [0060.097] GetFileType (hFile=0x270) returned 0x1 [0060.097] WriteFile (in: hFile=0x270, lpBuffer=0x221fb18*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x14dee8, lpOverlapped=0x0 | out: lpBuffer=0x221fb18*, lpNumberOfBytesWritten=0x14dee8*=0x119, lpOverlapped=0x0) returned 1 [0060.098] CloseHandle (hObject=0x270) returned 1 [0060.098] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.099] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e080) returned 1 [0060.099] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", lpFilePart=0x0) returned 0x31 [0060.099] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\", nBufferLength=0x105, lpBuffer=0x14db10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\", lpFilePart=0x0) returned 0x32 [0060.099] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\*", lpFindFileData=0x14dd20 | out: lpFindFileData=0x14dd20) returned 0xffffffffffffffff [0060.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dfb0) returned 1 [0060.101] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.101] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.101] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.101] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.102] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.102] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e080) returned 1 [0060.102] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos", lpFilePart=0x0) returned 0x31 [0060.102] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\", nBufferLength=0x105, lpBuffer=0x14db10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\", lpFilePart=0x0) returned 0x32 [0060.103] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\*", lpFindFileData=0x14dd20 | out: lpFindFileData=0x14dd20) returned 0xffffffffffffffff [0060.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dfb0) returned 1 [0060.105] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.105] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.105] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.105] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.106] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.106] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.106] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0060.106] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0060.106] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0060.106] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0060.106] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.106] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14d9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x4a [0060.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dea0) returned 1 [0060.106] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.107] GetFileType (hFile=0x270) returned 0x1 [0060.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de10) returned 1 [0060.107] GetFileType (hFile=0x270) returned 0x1 [0060.107] WriteFile (in: hFile=0x270, lpBuffer=0x2224820*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x14dee8, lpOverlapped=0x0 | out: lpBuffer=0x2224820*, lpNumberOfBytesWritten=0x14dee8*=0x119, lpOverlapped=0x0) returned 1 [0060.108] CloseHandle (hObject=0x270) returned 1 [0060.108] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.108] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e080) returned 1 [0060.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35 [0060.108] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\", nBufferLength=0x105, lpBuffer=0x14db10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\", lpFilePart=0x0) returned 0x36 [0060.108] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*", lpFindFileData=0x14dd20 | out: lpFindFileData=0x14dd20) returned 0xa748e0 [0060.109] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.109] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.109] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.109] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 0 [0060.109] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0060.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dfd0) returned 1 [0060.109] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14df90) returned 1 [0060.109] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.109] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.110] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.110] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.110] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.110] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.110] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0060.110] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0060.110] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst", lpFilePart=0x0) returned 0x4c [0060.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0060.110] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.110] GetFileType (hFile=0x270) returned 0x1 [0060.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0060.110] GetFileType (hFile=0x270) returned 0x1 [0060.110] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x42400 [0060.110] ReadFile (in: hFile=0x270, lpBuffer=0x122cc610, nNumberOfBytesToRead=0x42400, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x122cc610*, lpNumberOfBytesRead=0x14de68*=0x42400, lpOverlapped=0x0) returned 1 [0060.114] CloseHandle (hObject=0x270) returned 1 [0060.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst", lpFilePart=0x0) returned 0x4c [0060.115] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst")) returned 1 [0060.118] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst.sad", lpFilePart=0x0) returned 0x50 [0060.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0060.118] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.118] GetFileType (hFile=0x270) returned 0x1 [0060.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0060.118] GetFileType (hFile=0x270) returned 0x1 [0060.119] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.119] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.120] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.120] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.120] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.121] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.121] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.121] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.122] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.122] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.123] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.123] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.124] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.124] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.124] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.125] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.125] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.125] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.126] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.126] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.126] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.126] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.127] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.127] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.127] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.127] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.128] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.128] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.128] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.128] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.129] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.129] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.129] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.130] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.130] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.130] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.130] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.130] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.131] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.131] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.131] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.131] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.132] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.132] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.132] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.132] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.133] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.133] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.133] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.134] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.135] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.135] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.135] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.136] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.136] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.136] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.137] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.137] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.138] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.138] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.138] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.139] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.139] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.139] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.139] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.140] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.140] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.140] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.141] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.141] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.141] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.141] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.141] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.141] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.141] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.142] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.142] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.142] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.142] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.142] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.142] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.143] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.143] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.143] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.143] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.143] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.143] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.144] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.144] WriteFile (in: hFile=0x270, lpBuffer=0x2228748*, nNumberOfBytesToWrite=0x558, lpNumberOfBytesWritten=0x14dd28, lpOverlapped=0x0 | out: lpBuffer=0x2228748*, lpNumberOfBytesWritten=0x14dd28*=0x558, lpOverlapped=0x0) returned 1 [0060.144] CloseHandle (hObject=0x270) returned 1 [0060.147] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0060.147] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0060.147] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.147] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0060.147] DrawTextExW (in: hdc=0x8010893, lpchText="58 Files\r\nEncrypted", cchText=19, lprc=0x14dc08, format=0x2400, lpdtp=0x2229940 | out: lpchText="58 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0060.147] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.147] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.147] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.147] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e080) returned 1 [0060.148] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files", lpFilePart=0x0) returned 0x35 [0060.148] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\", nBufferLength=0x105, lpBuffer=0x14db10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\", lpFilePart=0x0) returned 0x36 [0060.148] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*", lpFindFileData=0x14dd20 | out: lpFindFileData=0x14dd20) returned 0xa748e0 [0060.148] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.148] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.148] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.148] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 0 [0060.148] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0060.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dfd0) returned 1 [0060.149] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14df90) returned 1 [0060.149] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.149] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.149] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0060.149] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0060.149] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0060.149] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0060.149] GetCurrentActCtx (in: lphActCtx=0x14e310 | out: lphActCtx=0x14e310*=0xa52648) returned 1 [0060.149] PeekMessageW (in: lpMsg=0x14e260, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e260) returned 0 [0060.149] GetWindowTextLengthW (hWnd=0x3019e) returned 39 [0060.149] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x27 [0060.149] GetSystemMetrics (nIndex=42) returned 0 [0060.149] GetWindowTextW (in: hWnd=0x3019e, lpString=0x14e1b0, nMaxCount=40 | out: lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents") returned 39 [0060.149] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xd, wParam=0x28, lParam=0x14e1b0) returned 0x27 [0060.149] GetWindowTextLengthW (hWnd=0x3019e) returned 39 [0060.149] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x27 [0060.149] GetSystemMetrics (nIndex=42) returned 0 [0060.149] GetWindowTextW (in: hWnd=0x3019e, lpString=0x14e150, nMaxCount=40 | out: lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents") returned 39 [0060.149] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xd, wParam=0x28, lParam=0x14e150) returned 0x27 [0060.149] SetWindowTextW (hWnd=0x3019e, lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music") returned 1 [0060.149] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xc, wParam=0x0, lParam=0x2124b0c) returned 0x1 [0060.265] GetStockObject (i=5) returned 0x1900015 [0060.265] GetDlgItem (hDlg=0x301d2, nIDDlgItem=197022) returned 0x3019e [0060.265] SendMessageW (hWnd=0x3019e, Msg=0x202b, wParam=0x3019e, lParam=0x14da50) returned 0x0 [0060.265] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x202b, wParam=0x3019e, lParam=0x14da50) returned 0x0 [0060.265] GetWindowTextLengthW (hWnd=0x3019e) returned 35 [0060.265] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0060.265] GetSystemMetrics (nIndex=42) returned 0 [0060.265] GetWindowTextW (in: hWnd=0x3019e, lpString=0x14e020, nMaxCount=36 | out: lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music") returned 35 [0060.265] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xd, wParam=0x24, lParam=0x14e020) returned 0x23 [0060.265] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.265] AdjustWindowRectEx (in: lpRect=0x14e078, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e078) returned 1 [0060.265] DrawTextExW (in: hdc=0x8010893, lpchText="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", cchText=35, lprc=0x14dfe8, format=0x102400, lpdtp=0x222b280 | out: lpchText="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lprc=0x14dfe8) returned 13 [0060.266] SetWindowPos (hWnd=0x3019e, hWndInsertAfter=0x0, X=12, Y=101, cx=205, cy=13, uFlags=0x16) returned 1 [0060.266] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x46, wParam=0x0, lParam=0x14e020) returned 0x0 [0060.266] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x83, wParam=0x1, lParam=0x14dff0) returned 0x0 [0060.266] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x47, wParam=0x0, lParam=0x14e020) returned 0x0 [0060.266] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x5, wParam=0x0, lParam=0xd00cd) returned 0x0 [0060.266] GetClientRect (in: hWnd=0x3019e, lpRect=0x14da50 | out: lpRect=0x14da50) returned 1 [0060.266] GetWindowRect (in: hWnd=0x3019e, lpRect=0x14da50 | out: lpRect=0x14da50) returned 1 [0060.266] GetParent (hWnd=0x3019e) returned 0x301d2 [0060.266] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301d2, lpPoints=0x14da50, cPoints=0x2 | out: lpPoints=0x14da50) returned 2097184000 [0060.266] InvalidateRect (hWnd=0x3019e, lpRect=0x0, bErase=1) returned 1 [0060.266] GetWindowTextLengthW (hWnd=0x3019e) returned 35 [0060.266] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0060.266] GetSystemMetrics (nIndex=42) returned 0 [0060.266] GetWindowTextW (in: hWnd=0x3019e, lpString=0x14d690, nMaxCount=36 | out: lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music") returned 35 [0060.266] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xd, wParam=0x24, lParam=0x14d690) returned 0x23 [0060.266] GetParent (hWnd=0x3019e) returned 0x301d2 [0060.266] InvalidateRect (hWnd=0x3019e, lpRect=0x0, bErase=1) returned 1 [0060.266] GetWindowTextLengthW (hWnd=0x301d2) returned 12 [0060.266] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0060.267] GetSystemMetrics (nIndex=42) returned 0 [0060.267] GetWindowTextW (in: hWnd=0x301d2, lpString=0x14dfd0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0060.267] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0xd, wParam=0xd, lParam=0x14dfd0) returned 0xc [0060.267] GetCurrentActCtx (in: lphActCtx=0x14e310 | out: lphActCtx=0x14e310*=0xa52648) returned 1 [0060.267] PeekMessageW (in: lpMsg=0x14e260, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e260) returned 1 [0060.267] PeekMessageW (in: lpMsg=0x2116508, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2116508) returned 1 [0060.267] IsWindowUnicode (hWnd=0x301ee) returned 1 [0060.267] GetMessageW (in: lpMsg=0x14e260, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14e260) returned 1 [0060.267] TranslateMessage (lpMsg=0x14e260) returned 0 [0060.267] DispatchMessageW (lpMsg=0x14e260) returned 0x0 [0060.378] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0060.378] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0060.378] CoTaskMemFree (pv=0xa692f0) [0060.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0060.378] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0060.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14da90) returned 1 [0060.378] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14db70 | out: lpFileInformation=0x14db70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0060.378] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14da50) returned 1 [0060.381] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0060.381] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14d9b0) returned 1 [0060.381] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.382] GetFileType (hFile=0x270) returned 0x1 [0060.382] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d920) returned 1 [0060.382] GetFileType (hFile=0x270) returned 0x1 [0060.382] ReadFile (in: hFile=0x270, lpBuffer=0x222d438, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14da88, lpOverlapped=0x0 | out: lpBuffer=0x222d438*, lpNumberOfBytesRead=0x14da88*=0x1, lpOverlapped=0x0) returned 1 [0060.430] ReadFile (in: hFile=0x270, lpBuffer=0x222d438, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14da88, lpOverlapped=0x0 | out: lpBuffer=0x222d438*, lpNumberOfBytesRead=0x14da88*=0x0, lpOverlapped=0x0) returned 1 [0060.430] CloseHandle (hObject=0x270) returned 1 [0060.502] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0060.502] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0060.502] CoTaskMemFree (pv=0xa692f0) [0060.502] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0060.502] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0060.502] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14da90) returned 1 [0060.502] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14db70 | out: lpFileInformation=0x14db70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0060.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14da50) returned 1 [0060.503] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0060.503] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14d970) returned 1 [0060.503] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.504] GetFileType (hFile=0x270) returned 0x1 [0060.504] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d8e0) returned 1 [0060.504] GetFileType (hFile=0x270) returned 0x1 [0060.504] WriteFile (in: hFile=0x270, lpBuffer=0x2230780*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x14d9b8, lpOverlapped=0x0 | out: lpBuffer=0x2230780*, lpNumberOfBytesWritten=0x14d9b8*=0x1, lpOverlapped=0x0) returned 1 [0060.505] CloseHandle (hObject=0x270) returned 1 [0060.509] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.510] AdjustWindowRectEx (in: lpRect=0x14d928, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d928) returned 1 [0060.511] SelectObject (hdc=0x8010893, h=0x200a0899) returned 0xb0a087e [0060.514] DrawTextExW (in: hdc=0x8010893, lpchText="5:0", cchText=3, lprc=0x14d898, format=0x2400, lpdtp=0x22317f8 | out: lpchText="5:0", lprc=0x14d898) returned 20 [0060.514] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.514] AdjustWindowRectEx (in: lpRect=0x14d998, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d998) returned 1 [0060.515] PeekMessageW (in: lpMsg=0x14e260, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e260) returned 0 [0060.515] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0060.515] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0060.515] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x38 [0060.515] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dfb0) returned 1 [0060.515] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.517] GetFileType (hFile=0x270) returned 0x1 [0060.517] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14df20) returned 1 [0060.517] GetFileType (hFile=0x270) returned 0x1 [0060.517] WriteFile (in: hFile=0x270, lpBuffer=0x2233050*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x14dff8, lpOverlapped=0x0 | out: lpBuffer=0x2233050*, lpNumberOfBytesWritten=0x14dff8*=0x119, lpOverlapped=0x0) returned 1 [0060.518] CloseHandle (hObject=0x270) returned 1 [0060.518] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0060.518] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0060.518] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e190) returned 1 [0060.518] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x14dc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0060.518] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\", nBufferLength=0x105, lpBuffer=0x14dc20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\", lpFilePart=0x0) returned 0x24 [0060.518] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x14de30 | out: lpFindFileData=0x14de30) returned 0xa748e0 [0060.519] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0060.519] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0060.519] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0060.519] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0060.519] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0060.519] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0060.519] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0060.519] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0060.520] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 0 [0060.520] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0060.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e0e0) returned 1 [0060.520] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e0a0) returned 1 [0060.520] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0060.520] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0060.520] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0060.520] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0060.520] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\024rRnQoo.m4a", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\024rRnQoo.m4a", lpFilePart=0x0) returned 0x31 [0060.520] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0060.520] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\024rRnQoo.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\024rrnqoo.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.520] GetFileType (hFile=0x270) returned 0x1 [0060.521] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0060.521] GetFileType (hFile=0x270) returned 0x1 [0060.521] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0xffb5 [0060.521] ReadFile (in: hFile=0x270, lpBuffer=0x2235b90, nNumberOfBytesToRead=0xffb5, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x2235b90*, lpNumberOfBytesRead=0x14df78*=0xffb5, lpOverlapped=0x0) returned 1 [0060.522] CloseHandle (hObject=0x270) returned 1 [0060.522] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\024rRnQoo.m4a", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\024rRnQoo.m4a", lpFilePart=0x0) returned 0x31 [0060.522] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\024rRnQoo.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\024rrnqoo.m4a")) returned 1 [0060.524] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\024rRnQoo.m4a.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\024rRnQoo.m4a.sad", lpFilePart=0x0) returned 0x35 [0060.524] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0060.524] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\024rRnQoo.m4a.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\024rrnqoo.m4a.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.524] GetFileType (hFile=0x270) returned 0x1 [0060.525] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0060.525] GetFileType (hFile=0x270) returned 0x1 [0060.525] WriteFile (in: hFile=0x270, lpBuffer=0x2247300*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2247300*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.526] WriteFile (in: hFile=0x270, lpBuffer=0x2247300*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2247300*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.527] WriteFile (in: hFile=0x270, lpBuffer=0x2247300*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2247300*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.527] WriteFile (in: hFile=0x270, lpBuffer=0x2247300*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2247300*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.528] WriteFile (in: hFile=0x270, lpBuffer=0x2247300*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2247300*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.528] WriteFile (in: hFile=0x270, lpBuffer=0x2247300*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2247300*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.528] WriteFile (in: hFile=0x270, lpBuffer=0x2247300*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2247300*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.529] WriteFile (in: hFile=0x270, lpBuffer=0x2247300*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2247300*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.529] WriteFile (in: hFile=0x270, lpBuffer=0x2247300*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2247300*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.530] WriteFile (in: hFile=0x270, lpBuffer=0x2247300*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2247300*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.531] WriteFile (in: hFile=0x270, lpBuffer=0x2247300*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2247300*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.531] WriteFile (in: hFile=0x270, lpBuffer=0x2247300*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2247300*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.532] WriteFile (in: hFile=0x270, lpBuffer=0x2247300*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2247300*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.532] WriteFile (in: hFile=0x270, lpBuffer=0x2247300*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2247300*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.533] WriteFile (in: hFile=0x270, lpBuffer=0x2247300*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2247300*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.534] WriteFile (in: hFile=0x270, lpBuffer=0x2247300*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2247300*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.534] WriteFile (in: hFile=0x270, lpBuffer=0x2247300*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2247300*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.535] WriteFile (in: hFile=0x270, lpBuffer=0x2247300*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2247300*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.536] WriteFile (in: hFile=0x270, lpBuffer=0x2247300*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2247300*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.537] WriteFile (in: hFile=0x270, lpBuffer=0x2247300*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2247300*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.537] WriteFile (in: hFile=0x270, lpBuffer=0x2247300*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2247300*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.538] WriteFile (in: hFile=0x270, lpBuffer=0x2247300*, nNumberOfBytesToWrite=0x4f4, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x2247300*, lpNumberOfBytesWritten=0x14de38*=0x4f4, lpOverlapped=0x0) returned 1 [0060.538] CloseHandle (hObject=0x270) returned 1 [0060.540] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0060.541] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0060.541] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.541] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0060.541] SelectObject (hdc=0x8010893, h=0xb0a087e) returned 0x200a0899 [0060.541] DrawTextExW (in: hdc=0x8010893, lpchText="59 Files\r\nEncrypted", cchText=19, lprc=0x14dd18, format=0x2400, lpdtp=0x2248520 | out: lpchText="59 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0060.541] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0060.541] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0060.541] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0060.541] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0060.542] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0060.542] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0060.542] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fB0nWUhgTDJsOL.mp3", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fB0nWUhgTDJsOL.mp3", lpFilePart=0x0) returned 0x37 [0060.542] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0060.542] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fB0nWUhgTDJsOL.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4fb0nwuhgtdjsol.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.542] GetFileType (hFile=0x270) returned 0x1 [0060.542] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0060.542] GetFileType (hFile=0x270) returned 0x1 [0060.542] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x147df [0060.542] ReadFile (in: hFile=0x270, lpBuffer=0x2248958, nNumberOfBytesToRead=0x147df, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x2248958*, lpNumberOfBytesRead=0x14df78*=0x147df, lpOverlapped=0x0) returned 1 [0060.545] CloseHandle (hObject=0x270) returned 1 [0060.546] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fB0nWUhgTDJsOL.mp3", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fB0nWUhgTDJsOL.mp3", lpFilePart=0x0) returned 0x37 [0060.546] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fB0nWUhgTDJsOL.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4fb0nwuhgtdjsol.mp3")) returned 1 [0060.549] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fB0nWUhgTDJsOL.mp3.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fB0nWUhgTDJsOL.mp3.sad", lpFilePart=0x0) returned 0x3b [0060.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0060.549] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\4fB0nWUhgTDJsOL.mp3.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\4fb0nwuhgtdjsol.mp3.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.550] GetFileType (hFile=0x270) returned 0x1 [0060.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0060.550] GetFileType (hFile=0x270) returned 0x1 [0060.550] WriteFile (in: hFile=0x270, lpBuffer=0x225e910*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225e910*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.551] WriteFile (in: hFile=0x270, lpBuffer=0x225e910*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225e910*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.552] WriteFile (in: hFile=0x270, lpBuffer=0x225e910*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225e910*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.552] WriteFile (in: hFile=0x270, lpBuffer=0x225e910*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225e910*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.553] WriteFile (in: hFile=0x270, lpBuffer=0x225e910*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225e910*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.553] WriteFile (in: hFile=0x270, lpBuffer=0x225e910*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225e910*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.553] WriteFile (in: hFile=0x270, lpBuffer=0x225e910*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225e910*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.554] WriteFile (in: hFile=0x270, lpBuffer=0x225e910*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225e910*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.554] WriteFile (in: hFile=0x270, lpBuffer=0x225e910*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225e910*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.555] WriteFile (in: hFile=0x270, lpBuffer=0x225e910*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225e910*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.556] WriteFile (in: hFile=0x270, lpBuffer=0x225e910*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225e910*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.558] WriteFile (in: hFile=0x270, lpBuffer=0x225e910*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225e910*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.559] WriteFile (in: hFile=0x270, lpBuffer=0x225e910*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225e910*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.559] WriteFile (in: hFile=0x270, lpBuffer=0x225e910*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225e910*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.560] WriteFile (in: hFile=0x270, lpBuffer=0x225e910*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225e910*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.560] WriteFile (in: hFile=0x270, lpBuffer=0x225e910*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225e910*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.561] WriteFile (in: hFile=0x270, lpBuffer=0x225e910*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225e910*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.561] WriteFile (in: hFile=0x270, lpBuffer=0x225e910*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225e910*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.563] WriteFile (in: hFile=0x270, lpBuffer=0x225e910*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225e910*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.563] WriteFile (in: hFile=0x270, lpBuffer=0x225e910*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225e910*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.564] WriteFile (in: hFile=0x270, lpBuffer=0x225e910*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225e910*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.565] WriteFile (in: hFile=0x270, lpBuffer=0x225e910*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225e910*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.566] WriteFile (in: hFile=0x270, lpBuffer=0x225e910*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225e910*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.567] WriteFile (in: hFile=0x270, lpBuffer=0x225e910*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225e910*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.568] WriteFile (in: hFile=0x270, lpBuffer=0x225e910*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225e910*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.569] WriteFile (in: hFile=0x270, lpBuffer=0x225e910*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225e910*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.569] WriteFile (in: hFile=0x270, lpBuffer=0x225e910*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225e910*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.569] WriteFile (in: hFile=0x270, lpBuffer=0x225e910*, nNumberOfBytesToWrite=0x52c, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x225e910*, lpNumberOfBytesWritten=0x14de38*=0x52c, lpOverlapped=0x0) returned 1 [0060.570] CloseHandle (hObject=0x270) returned 1 [0060.572] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0060.572] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0060.573] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.573] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0060.573] DrawTextExW (in: hdc=0x8010893, lpchText="60 Files\r\nEncrypted", cchText=19, lprc=0x14dd18, format=0x2400, lpdtp=0x225fb30 | out: lpchText="60 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0060.573] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0060.573] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0060.573] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0060.573] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0060.573] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0060.573] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0060.573] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini", lpFilePart=0x0) returned 0x2f [0060.573] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0060.573] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.573] GetFileType (hFile=0x270) returned 0x1 [0060.573] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0060.573] GetFileType (hFile=0x270) returned 0x1 [0060.573] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x1f8 [0060.574] ReadFile (in: hFile=0x270, lpBuffer=0x2260148, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x2260148*, lpNumberOfBytesRead=0x14df78*=0x1f8, lpOverlapped=0x0) returned 1 [0060.574] CloseHandle (hObject=0x270) returned 1 [0060.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini", lpFilePart=0x0) returned 0x2f [0060.575] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\desktop.ini")) returned 1 [0060.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini.sad", lpFilePart=0x0) returned 0x33 [0060.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0060.576] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\desktop.ini.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.576] GetFileType (hFile=0x270) returned 0x1 [0060.576] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0060.576] GetFileType (hFile=0x270) returned 0x1 [0060.576] WriteFile (in: hFile=0x270, lpBuffer=0x2262e40*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x2262e40*, lpNumberOfBytesWritten=0x14de38*=0x2a0, lpOverlapped=0x0) returned 1 [0060.577] CloseHandle (hObject=0x270) returned 1 [0060.578] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0060.578] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0060.578] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.578] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0060.578] DrawTextExW (in: hdc=0x8010893, lpchText="61 Files\r\nEncrypted", cchText=19, lprc=0x14dd18, format=0x2400, lpdtp=0x2264038 | out: lpchText="61 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0060.578] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0060.578] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0060.578] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0060.578] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0060.578] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0060.578] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0060.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rl0Q7YbTp3v7UXa.m4a", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rl0Q7YbTp3v7UXa.m4a", lpFilePart=0x0) returned 0x37 [0060.579] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0060.579] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rl0Q7YbTp3v7UXa.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rl0q7ybtp3v7uxa.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.579] GetFileType (hFile=0x270) returned 0x1 [0060.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0060.579] GetFileType (hFile=0x270) returned 0x1 [0060.579] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x63a1 [0060.579] ReadFile (in: hFile=0x270, lpBuffer=0x2264470, nNumberOfBytesToRead=0x63a1, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x2264470*, lpNumberOfBytesRead=0x14df78*=0x63a1, lpOverlapped=0x0) returned 1 [0060.580] CloseHandle (hObject=0x270) returned 1 [0060.580] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rl0Q7YbTp3v7UXa.m4a", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rl0Q7YbTp3v7UXa.m4a", lpFilePart=0x0) returned 0x37 [0060.580] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rl0Q7YbTp3v7UXa.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rl0q7ybtp3v7uxa.m4a")) returned 1 [0060.581] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rl0Q7YbTp3v7UXa.m4a.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rl0Q7YbTp3v7UXa.m4a.sad", lpFilePart=0x0) returned 0x3b [0060.581] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0060.581] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\rl0Q7YbTp3v7UXa.m4a.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\rl0q7ybtp3v7uxa.m4a.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.581] GetFileType (hFile=0x270) returned 0x1 [0060.581] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0060.581] GetFileType (hFile=0x270) returned 0x1 [0060.582] WriteFile (in: hFile=0x270, lpBuffer=0x227c9c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x227c9c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.582] WriteFile (in: hFile=0x270, lpBuffer=0x227c9c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x227c9c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.583] WriteFile (in: hFile=0x270, lpBuffer=0x227c9c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x227c9c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.583] WriteFile (in: hFile=0x270, lpBuffer=0x227c9c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x227c9c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.583] WriteFile (in: hFile=0x270, lpBuffer=0x227c9c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x227c9c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.583] WriteFile (in: hFile=0x270, lpBuffer=0x227c9c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x227c9c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.584] WriteFile (in: hFile=0x270, lpBuffer=0x227c9c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x227c9c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.584] WriteFile (in: hFile=0x270, lpBuffer=0x227c9c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x227c9c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0060.584] WriteFile (in: hFile=0x270, lpBuffer=0x227c9c0*, nNumberOfBytesToWrite=0x4d8, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x227c9c0*, lpNumberOfBytesWritten=0x14de38*=0x4d8, lpOverlapped=0x0) returned 1 [0060.584] CloseHandle (hObject=0x270) returned 1 [0060.585] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0060.585] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0060.586] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.586] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0060.586] DrawTextExW (in: hdc=0x8010893, lpchText="62 Files\r\nEncrypted", cchText=19, lprc=0x14dd18, format=0x2400, lpdtp=0x227dbb8 | out: lpchText="62 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0060.586] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0060.586] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0060.586] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0060.586] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0060.586] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0060.586] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0060.586] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0060.586] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0060.586] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e190) returned 1 [0060.586] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", nBufferLength=0x105, lpBuffer=0x14dc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music", lpFilePart=0x0) returned 0x23 [0060.586] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\", nBufferLength=0x105, lpBuffer=0x14dc20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\", lpFilePart=0x0) returned 0x24 [0060.586] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x14de30 | out: lpFindFileData=0x14de30) returned 0xa748e0 [0060.586] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0060.587] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0060.587] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0060.587] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0060.587] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0060.587] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0060.587] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0060.587] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0060.588] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 0 [0060.588] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0060.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e0e0) returned 1 [0060.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e0a0) returned 1 [0060.588] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0060.588] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0060.588] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.588] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.588] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14d9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x3f [0060.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dea0) returned 1 [0060.588] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.588] GetFileType (hFile=0x270) returned 0x1 [0060.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de10) returned 1 [0060.589] GetFileType (hFile=0x270) returned 0x1 [0060.589] WriteFile (in: hFile=0x270, lpBuffer=0x2280dd0*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x14dee8, lpOverlapped=0x0 | out: lpBuffer=0x2280dd0*, lpNumberOfBytesWritten=0x14dee8*=0x119, lpOverlapped=0x0) returned 1 [0060.590] CloseHandle (hObject=0x270) returned 1 [0060.590] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.590] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.590] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e080) returned 1 [0060.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD", lpFilePart=0x0) returned 0x2a [0060.590] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\", nBufferLength=0x105, lpBuffer=0x14db10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\", lpFilePart=0x0) returned 0x2b [0060.590] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\*", lpFindFileData=0x14dd20 | out: lpFindFileData=0x14dd20) returned 0xa748e0 [0060.590] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.590] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.591] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.591] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.591] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.591] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.591] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.591] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 0 [0060.591] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0060.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dfd0) returned 1 [0060.591] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14df90) returned 1 [0060.591] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.591] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.591] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0060.591] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0060.591] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\0G4JNna_noSCGoW.wav", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\0G4JNna_noSCGoW.wav", lpFilePart=0x0) returned 0x3e [0060.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0060.592] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\0G4JNna_noSCGoW.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\0g4jnna_noscgow.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.592] GetFileType (hFile=0x270) returned 0x1 [0060.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0060.592] GetFileType (hFile=0x270) returned 0x1 [0060.592] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x2089 [0060.592] ReadFile (in: hFile=0x270, lpBuffer=0x22838c0, nNumberOfBytesToRead=0x2089, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x22838c0*, lpNumberOfBytesRead=0x14de68*=0x2089, lpOverlapped=0x0) returned 1 [0060.593] CloseHandle (hObject=0x270) returned 1 [0060.593] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\0G4JNna_noSCGoW.wav", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\0G4JNna_noSCGoW.wav", lpFilePart=0x0) returned 0x3e [0060.593] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\0G4JNna_noSCGoW.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\0g4jnna_noscgow.wav")) returned 1 [0060.594] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\0G4JNna_noSCGoW.wav.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\0G4JNna_noSCGoW.wav.sad", lpFilePart=0x0) returned 0x42 [0060.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0060.594] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\0G4JNna_noSCGoW.wav.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\0g4jnna_noscgow.wav.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.594] GetFileType (hFile=0x270) returned 0x1 [0060.594] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0060.594] GetFileType (hFile=0x270) returned 0x1 [0060.594] WriteFile (in: hFile=0x270, lpBuffer=0x228c840*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x228c840*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.595] WriteFile (in: hFile=0x270, lpBuffer=0x228c840*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x228c840*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.595] WriteFile (in: hFile=0x270, lpBuffer=0x228c840*, nNumberOfBytesToWrite=0xb64, lpNumberOfBytesWritten=0x14dd28, lpOverlapped=0x0 | out: lpBuffer=0x228c840*, lpNumberOfBytesWritten=0x14dd28*=0xb64, lpOverlapped=0x0) returned 1 [0060.596] CloseHandle (hObject=0x270) returned 1 [0060.597] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0060.597] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0060.598] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.598] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0060.598] DrawTextExW (in: hdc=0x8010893, lpchText="63 Files\r\nEncrypted", cchText=19, lprc=0x14dc08, format=0x2400, lpdtp=0x228da38 | out: lpchText="63 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0060.598] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.599] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.599] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.599] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.599] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0060.599] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0060.599] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\BfE3s.wav", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\BfE3s.wav", lpFilePart=0x0) returned 0x34 [0060.599] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0060.599] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\BfE3s.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\bfe3s.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.599] GetFileType (hFile=0x270) returned 0x1 [0060.599] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0060.599] GetFileType (hFile=0x270) returned 0x1 [0060.599] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x52b3 [0060.600] ReadFile (in: hFile=0x270, lpBuffer=0x228de50, nNumberOfBytesToRead=0x52b3, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x228de50*, lpNumberOfBytesRead=0x14de68*=0x52b3, lpOverlapped=0x0) returned 1 [0060.600] CloseHandle (hObject=0x270) returned 1 [0060.601] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\BfE3s.wav", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\BfE3s.wav", lpFilePart=0x0) returned 0x34 [0060.601] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\BfE3s.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\bfe3s.wav")) returned 1 [0060.602] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\BfE3s.wav.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\BfE3s.wav.sad", lpFilePart=0x0) returned 0x38 [0060.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0060.602] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\BfE3s.wav.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\bfe3s.wav.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.602] GetFileType (hFile=0x270) returned 0x1 [0060.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0060.602] GetFileType (hFile=0x270) returned 0x1 [0060.603] WriteFile (in: hFile=0x270, lpBuffer=0x22a2578*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a2578*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.604] WriteFile (in: hFile=0x270, lpBuffer=0x22a2578*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a2578*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.604] WriteFile (in: hFile=0x270, lpBuffer=0x22a2578*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a2578*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.604] WriteFile (in: hFile=0x270, lpBuffer=0x22a2578*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a2578*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.604] WriteFile (in: hFile=0x270, lpBuffer=0x22a2578*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a2578*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.604] WriteFile (in: hFile=0x270, lpBuffer=0x22a2578*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a2578*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.605] WriteFile (in: hFile=0x270, lpBuffer=0x22a2578*, nNumberOfBytesToWrite=0xe44, lpNumberOfBytesWritten=0x14dd28, lpOverlapped=0x0 | out: lpBuffer=0x22a2578*, lpNumberOfBytesWritten=0x14dd28*=0xe44, lpOverlapped=0x0) returned 1 [0060.605] CloseHandle (hObject=0x270) returned 1 [0060.606] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0060.606] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0060.607] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.607] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0060.607] DrawTextExW (in: hdc=0x8010893, lpchText="64 Files\r\nEncrypted", cchText=19, lprc=0x14dc08, format=0x2400, lpdtp=0x22a3770 | out: lpchText="64 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0060.607] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.607] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.607] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.607] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.607] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0060.607] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0060.607] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\MAEQXx.m4a", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\MAEQXx.m4a", lpFilePart=0x0) returned 0x35 [0060.607] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0060.607] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\MAEQXx.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\maeqxx.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.607] GetFileType (hFile=0x270) returned 0x1 [0060.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0060.607] GetFileType (hFile=0x270) returned 0x1 [0060.608] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x16dbb [0060.608] ReadFile (in: hFile=0x270, lpBuffer=0x1243fb98, nNumberOfBytesToRead=0x16dbb, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x1243fb98*, lpNumberOfBytesRead=0x14de68*=0x16dbb, lpOverlapped=0x0) returned 1 [0060.609] CloseHandle (hObject=0x270) returned 1 [0060.612] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\MAEQXx.m4a", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\MAEQXx.m4a", lpFilePart=0x0) returned 0x35 [0060.612] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\MAEQXx.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\maeqxx.m4a")) returned 1 [0060.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\MAEQXx.m4a.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\MAEQXx.m4a.sad", lpFilePart=0x0) returned 0x39 [0060.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0060.613] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\MAEQXx.m4a.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\maeqxx.m4a.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.614] GetFileType (hFile=0x270) returned 0x1 [0060.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0060.614] GetFileType (hFile=0x270) returned 0x1 [0060.614] WriteFile (in: hFile=0x270, lpBuffer=0x22a5338*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a5338*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.615] WriteFile (in: hFile=0x270, lpBuffer=0x22a5338*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a5338*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.615] WriteFile (in: hFile=0x270, lpBuffer=0x22a5338*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a5338*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.615] WriteFile (in: hFile=0x270, lpBuffer=0x22a5338*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a5338*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.615] WriteFile (in: hFile=0x270, lpBuffer=0x22a5338*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a5338*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.615] WriteFile (in: hFile=0x270, lpBuffer=0x22a5338*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a5338*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.616] WriteFile (in: hFile=0x270, lpBuffer=0x22a5338*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a5338*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.616] WriteFile (in: hFile=0x270, lpBuffer=0x22a5338*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a5338*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.616] WriteFile (in: hFile=0x270, lpBuffer=0x22a5338*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a5338*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.616] WriteFile (in: hFile=0x270, lpBuffer=0x22a5338*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a5338*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.616] WriteFile (in: hFile=0x270, lpBuffer=0x22a5338*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a5338*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.616] WriteFile (in: hFile=0x270, lpBuffer=0x22a5338*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a5338*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.617] WriteFile (in: hFile=0x270, lpBuffer=0x22a5338*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a5338*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.617] WriteFile (in: hFile=0x270, lpBuffer=0x22a5338*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a5338*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.617] WriteFile (in: hFile=0x270, lpBuffer=0x22a5338*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a5338*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.617] WriteFile (in: hFile=0x270, lpBuffer=0x22a5338*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a5338*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.617] WriteFile (in: hFile=0x270, lpBuffer=0x22a5338*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a5338*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.617] WriteFile (in: hFile=0x270, lpBuffer=0x22a5338*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a5338*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.617] WriteFile (in: hFile=0x270, lpBuffer=0x22a5338*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a5338*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.617] WriteFile (in: hFile=0x270, lpBuffer=0x22a5338*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a5338*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.618] WriteFile (in: hFile=0x270, lpBuffer=0x22a5338*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a5338*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.618] WriteFile (in: hFile=0x270, lpBuffer=0x22a5338*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a5338*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.618] WriteFile (in: hFile=0x270, lpBuffer=0x22a5338*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a5338*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.618] WriteFile (in: hFile=0x270, lpBuffer=0x22a5338*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a5338*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.618] WriteFile (in: hFile=0x270, lpBuffer=0x22a5338*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a5338*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.618] WriteFile (in: hFile=0x270, lpBuffer=0x22a5338*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a5338*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.618] WriteFile (in: hFile=0x270, lpBuffer=0x22a5338*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a5338*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.619] WriteFile (in: hFile=0x270, lpBuffer=0x22a5338*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a5338*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.619] WriteFile (in: hFile=0x270, lpBuffer=0x22a5338*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a5338*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.619] WriteFile (in: hFile=0x270, lpBuffer=0x22a5338*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x22a5338*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.619] WriteFile (in: hFile=0x270, lpBuffer=0x22a5338*, nNumberOfBytesToWrite=0x7a4, lpNumberOfBytesWritten=0x14dd28, lpOverlapped=0x0 | out: lpBuffer=0x22a5338*, lpNumberOfBytesWritten=0x14dd28*=0x7a4, lpOverlapped=0x0) returned 1 [0060.620] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0060.620] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0060.621] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.621] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0060.621] DrawTextExW (in: hdc=0x8010893, lpchText="65 Files\r\nEncrypted", cchText=19, lprc=0x14dc08, format=0x2400, lpdtp=0x22a6530 | out: lpchText="65 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0060.621] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.621] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.621] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.621] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.621] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0060.621] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0060.621] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\NAZB6q6C4Dtfk4hPkm3.m4a", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\NAZB6q6C4Dtfk4hPkm3.m4a", lpFilePart=0x0) returned 0x42 [0060.621] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0060.621] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\NAZB6q6C4Dtfk4hPkm3.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\nazb6q6c4dtfk4hpkm3.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.621] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0060.622] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x3c66 [0060.622] ReadFile (in: hFile=0x270, lpBuffer=0x22a6990, nNumberOfBytesToRead=0x3c66, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x22a6990*, lpNumberOfBytesRead=0x14de68*=0x3c66, lpOverlapped=0x0) returned 1 [0060.623] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\NAZB6q6C4Dtfk4hPkm3.m4a", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\NAZB6q6C4Dtfk4hPkm3.m4a", lpFilePart=0x0) returned 0x42 [0060.623] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\NAZB6q6C4Dtfk4hPkm3.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\nazb6q6c4dtfk4hpkm3.m4a")) returned 1 [0060.624] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\NAZB6q6C4Dtfk4hPkm3.m4a.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\NAZB6q6C4Dtfk4hPkm3.m4a.sad", lpFilePart=0x0) returned 0x46 [0060.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0060.624] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\NAZB6q6C4Dtfk4hPkm3.m4a.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\nazb6q6c4dtfk4hpkm3.m4a.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0060.626] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0060.626] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0060.626] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.626] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0060.626] DrawTextExW (in: hdc=0x8010893, lpchText="66 Files\r\nEncrypted", cchText=19, lprc=0x14dc08, format=0x2400, lpdtp=0x22b7148 | out: lpchText="66 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0060.627] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.627] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.627] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.627] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.627] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.627] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.627] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.627] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.627] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e080) returned 1 [0060.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD", lpFilePart=0x0) returned 0x2a [0060.627] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\", nBufferLength=0x105, lpBuffer=0x14db10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\", lpFilePart=0x0) returned 0x2b [0060.627] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\*", lpFindFileData=0x14dd20 | out: lpFindFileData=0x14dd20) returned 0xa748e0 [0060.627] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.628] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.628] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.628] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.628] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.628] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.629] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.629] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 0 [0060.629] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0060.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dfd0) returned 1 [0060.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14df90) returned 1 [0060.629] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.629] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.629] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0060.629] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0060.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x50 [0060.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dd90) returned 1 [0060.629] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd00) returned 1 [0060.631] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0060.631] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0060.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14df70) returned 1 [0060.631] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg", lpFilePart=0x0) returned 0x3b [0060.631] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\", nBufferLength=0x105, lpBuffer=0x14da00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\", lpFilePart=0x0) returned 0x3c [0060.631] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\*", lpFindFileData=0x14dc10 | out: lpFindFileData=0x14dc10) returned 0xa748e0 [0060.631] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0060.631] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0060.632] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0060.632] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0060.632] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0060.632] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0060.632] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0060.632] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0060.632] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 0 [0060.633] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0060.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dec0) returned 1 [0060.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de80) returned 1 [0060.633] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0060.633] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0060.633] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0060.633] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0060.633] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\2wS01_qBHc FN49kVFoC.wav", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\2wS01_qBHc FN49kVFoC.wav", lpFilePart=0x0) returned 0x54 [0060.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0060.633] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\2wS01_qBHc FN49kVFoC.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\2ws01_qbhc fn49kvfoc.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0060.633] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x9f8d [0060.634] ReadFile (in: hFile=0x270, lpBuffer=0x22bd508, nNumberOfBytesToRead=0x9f8d, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x22bd508*, lpNumberOfBytesRead=0x14dd58*=0x9f8d, lpOverlapped=0x0) returned 1 [0060.656] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\2wS01_qBHc FN49kVFoC.wav", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\2wS01_qBHc FN49kVFoC.wav", lpFilePart=0x0) returned 0x54 [0060.656] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\2wS01_qBHc FN49kVFoC.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\2ws01_qbhc fn49kvfoc.wav")) returned 1 [0060.658] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\2wS01_qBHc FN49kVFoC.wav.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\2wS01_qBHc FN49kVFoC.wav.sad", lpFilePart=0x0) returned 0x58 [0060.658] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0060.658] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\2wS01_qBHc FN49kVFoC.wav.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\2ws01_qbhc fn49kvfoc.wav.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.658] GetFileType (hFile=0x270) returned 0x1 [0060.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0060.658] GetFileType (hFile=0x270) returned 0x1 [0060.659] WriteFile (in: hFile=0x270, lpBuffer=0x213da50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x213da50*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.660] WriteFile (in: hFile=0x270, lpBuffer=0x213da50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x213da50*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.660] WriteFile (in: hFile=0x270, lpBuffer=0x213da50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x213da50*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.661] WriteFile (in: hFile=0x270, lpBuffer=0x213da50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x213da50*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.661] WriteFile (in: hFile=0x270, lpBuffer=0x213da50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x213da50*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.661] WriteFile (in: hFile=0x270, lpBuffer=0x213da50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x213da50*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.662] WriteFile (in: hFile=0x270, lpBuffer=0x213da50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x213da50*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.662] WriteFile (in: hFile=0x270, lpBuffer=0x213da50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x213da50*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.663] WriteFile (in: hFile=0x270, lpBuffer=0x213da50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x213da50*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.663] WriteFile (in: hFile=0x270, lpBuffer=0x213da50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x213da50*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.664] WriteFile (in: hFile=0x270, lpBuffer=0x213da50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x213da50*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.664] WriteFile (in: hFile=0x270, lpBuffer=0x213da50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x213da50*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.664] WriteFile (in: hFile=0x270, lpBuffer=0x213da50*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x213da50*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.664] WriteFile (in: hFile=0x270, lpBuffer=0x213da50*, nNumberOfBytesToWrite=0x4bc, lpNumberOfBytesWritten=0x14dc18, lpOverlapped=0x0 | out: lpBuffer=0x213da50*, lpNumberOfBytesWritten=0x14dc18*=0x4bc, lpOverlapped=0x0) returned 1 [0060.665] CloseHandle (hObject=0x270) returned 1 [0060.673] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0060.674] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0060.674] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.674] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0060.674] DrawTextExW (in: hdc=0x8010893, lpchText="67 Files\r\nEncrypted", cchText=19, lprc=0x14daf8, format=0x2400, lpdtp=0x213ec48 | out: lpchText="67 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0060.674] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0060.674] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0060.674] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0060.674] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0060.674] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0060.675] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0060.675] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\4pWIwrL GKphSzvMN.m4a", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\4pWIwrL GKphSzvMN.m4a", lpFilePart=0x0) returned 0x51 [0060.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0060.675] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\4pWIwrL GKphSzvMN.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\4pwiwrl gkphszvmn.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.675] GetFileType (hFile=0x270) returned 0x1 [0060.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0060.675] GetFileType (hFile=0x270) returned 0x1 [0060.675] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x5cdf [0060.675] ReadFile (in: hFile=0x270, lpBuffer=0x213f0c8, nNumberOfBytesToRead=0x5cdf, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x213f0c8*, lpNumberOfBytesRead=0x14dd58*=0x5cdf, lpOverlapped=0x0) returned 1 [0060.676] CloseHandle (hObject=0x270) returned 1 [0060.676] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\4pWIwrL GKphSzvMN.m4a", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\4pWIwrL GKphSzvMN.m4a", lpFilePart=0x0) returned 0x51 [0060.676] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\4pWIwrL GKphSzvMN.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\4pwiwrl gkphszvmn.m4a")) returned 1 [0060.678] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\4pWIwrL GKphSzvMN.m4a.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\4pWIwrL GKphSzvMN.m4a.sad", lpFilePart=0x0) returned 0x55 [0060.678] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0060.678] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\4pWIwrL GKphSzvMN.m4a.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\4pwiwrl gkphszvmn.m4a.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.678] GetFileType (hFile=0x270) returned 0x1 [0060.678] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0060.678] GetFileType (hFile=0x270) returned 0x1 [0060.678] WriteFile (in: hFile=0x270, lpBuffer=0x2155df8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2155df8*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.679] WriteFile (in: hFile=0x270, lpBuffer=0x2155df8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2155df8*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.680] WriteFile (in: hFile=0x270, lpBuffer=0x2155df8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2155df8*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.680] WriteFile (in: hFile=0x270, lpBuffer=0x2155df8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2155df8*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.680] WriteFile (in: hFile=0x270, lpBuffer=0x2155df8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2155df8*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.681] WriteFile (in: hFile=0x270, lpBuffer=0x2155df8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2155df8*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.681] WriteFile (in: hFile=0x270, lpBuffer=0x2155df8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2155df8*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.681] WriteFile (in: hFile=0x270, lpBuffer=0x2155df8*, nNumberOfBytesToWrite=0xbd4, lpNumberOfBytesWritten=0x14dc18, lpOverlapped=0x0 | out: lpBuffer=0x2155df8*, lpNumberOfBytesWritten=0x14dc18*=0xbd4, lpOverlapped=0x0) returned 1 [0060.682] CloseHandle (hObject=0x270) returned 1 [0060.685] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0060.685] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0060.686] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.686] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0060.686] DrawTextExW (in: hdc=0x8010893, lpchText="68 Files\r\nEncrypted", cchText=19, lprc=0x14daf8, format=0x2400, lpdtp=0x2156ff0 | out: lpchText="68 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0060.687] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0060.687] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0060.687] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0060.687] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0060.687] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0060.687] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0060.687] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\e0be5elDO2S.mp3", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\e0be5elDO2S.mp3", lpFilePart=0x0) returned 0x4b [0060.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0060.687] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\e0be5elDO2S.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\e0be5eldo2s.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.688] GetFileType (hFile=0x270) returned 0x1 [0060.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0060.688] GetFileType (hFile=0x270) returned 0x1 [0060.688] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x2ef2 [0060.688] ReadFile (in: hFile=0x270, lpBuffer=0x2157440, nNumberOfBytesToRead=0x2ef2, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x2157440*, lpNumberOfBytesRead=0x14dd58*=0x2ef2, lpOverlapped=0x0) returned 1 [0060.690] CloseHandle (hObject=0x270) returned 1 [0060.690] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\e0be5elDO2S.mp3", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\e0be5elDO2S.mp3", lpFilePart=0x0) returned 0x4b [0060.690] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\e0be5elDO2S.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\e0be5eldo2s.mp3")) returned 1 [0060.692] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\e0be5elDO2S.mp3.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\e0be5elDO2S.mp3.sad", lpFilePart=0x0) returned 0x4f [0060.692] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0060.692] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\e0be5elDO2S.mp3.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\e0be5eldo2s.mp3.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.693] GetFileType (hFile=0x270) returned 0x1 [0060.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0060.693] GetFileType (hFile=0x270) returned 0x1 [0060.694] WriteFile (in: hFile=0x270, lpBuffer=0x21638d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21638d0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.695] WriteFile (in: hFile=0x270, lpBuffer=0x21638d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21638d0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.695] WriteFile (in: hFile=0x270, lpBuffer=0x21638d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21638d0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.696] WriteFile (in: hFile=0x270, lpBuffer=0x21638d0*, nNumberOfBytesToWrite=0xe98, lpNumberOfBytesWritten=0x14dc18, lpOverlapped=0x0 | out: lpBuffer=0x21638d0*, lpNumberOfBytesWritten=0x14dc18*=0xe98, lpOverlapped=0x0) returned 1 [0060.696] CloseHandle (hObject=0x270) returned 1 [0060.701] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0060.701] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0060.701] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.701] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0060.702] DrawTextExW (in: hdc=0x8010893, lpchText="69 Files\r\nEncrypted", cchText=19, lprc=0x14daf8, format=0x2400, lpdtp=0x2164ac8 | out: lpchText="69 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0060.702] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0060.702] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0060.702] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0060.702] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0060.702] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0060.702] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0060.702] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\Nju1Sy.wav", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\Nju1Sy.wav", lpFilePart=0x0) returned 0x46 [0060.702] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0060.702] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\Nju1Sy.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\nju1sy.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.702] GetFileType (hFile=0x270) returned 0x1 [0060.702] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0060.702] GetFileType (hFile=0x270) returned 0x1 [0060.702] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x7340 [0060.703] ReadFile (in: hFile=0x270, lpBuffer=0x2164f00, nNumberOfBytesToRead=0x7340, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x2164f00*, lpNumberOfBytesRead=0x14dd58*=0x7340, lpOverlapped=0x0) returned 1 [0060.704] CloseHandle (hObject=0x270) returned 1 [0060.704] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\Nju1Sy.wav", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\Nju1Sy.wav", lpFilePart=0x0) returned 0x46 [0060.704] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\Nju1Sy.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\nju1sy.wav")) returned 1 [0060.706] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\Nju1Sy.wav.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\Nju1Sy.wav.sad", lpFilePart=0x0) returned 0x4a [0060.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0060.706] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\Nju1Sy.wav.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\nju1sy.wav.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.706] GetFileType (hFile=0x270) returned 0x1 [0060.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0060.706] GetFileType (hFile=0x270) returned 0x1 [0060.706] WriteFile (in: hFile=0x270, lpBuffer=0x2180de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2180de0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.708] WriteFile (in: hFile=0x270, lpBuffer=0x2180de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2180de0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.708] WriteFile (in: hFile=0x270, lpBuffer=0x2180de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2180de0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.709] WriteFile (in: hFile=0x270, lpBuffer=0x2180de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2180de0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.709] WriteFile (in: hFile=0x270, lpBuffer=0x2180de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2180de0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.709] WriteFile (in: hFile=0x270, lpBuffer=0x2180de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2180de0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.710] WriteFile (in: hFile=0x270, lpBuffer=0x2180de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2180de0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.710] WriteFile (in: hFile=0x270, lpBuffer=0x2180de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2180de0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.710] WriteFile (in: hFile=0x270, lpBuffer=0x2180de0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2180de0*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.711] WriteFile (in: hFile=0x270, lpBuffer=0x2180de0*, nNumberOfBytesToWrite=0x9ac, lpNumberOfBytesWritten=0x14dc18, lpOverlapped=0x0 | out: lpBuffer=0x2180de0*, lpNumberOfBytesWritten=0x14dc18*=0x9ac, lpOverlapped=0x0) returned 1 [0060.711] CloseHandle (hObject=0x270) returned 1 [0060.712] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0060.712] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0060.712] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.712] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0060.712] DrawTextExW (in: hdc=0x8010893, lpchText="70 Files\r\nEncrypted", cchText=19, lprc=0x14daf8, format=0x2400, lpdtp=0x2181fd8 | out: lpchText="70 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0060.712] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0060.712] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0060.713] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0060.713] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0060.713] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0060.713] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0060.713] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0060.713] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0060.713] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0060.713] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0060.713] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\X 5JPt1NErYH.m4a", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\X 5JPt1NErYH.m4a", lpFilePart=0x0) returned 0x4c [0060.713] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0060.713] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\X 5JPt1NErYH.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\x 5jpt1neryh.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.713] GetFileType (hFile=0x270) returned 0x1 [0060.713] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0060.713] GetFileType (hFile=0x270) returned 0x1 [0060.713] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x11d6f [0060.713] ReadFile (in: hFile=0x270, lpBuffer=0x2182648, nNumberOfBytesToRead=0x11d6f, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x2182648*, lpNumberOfBytesRead=0x14dd58*=0x11d6f, lpOverlapped=0x0) returned 1 [0060.715] CloseHandle (hObject=0x270) returned 1 [0060.718] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\X 5JPt1NErYH.m4a", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\X 5JPt1NErYH.m4a", lpFilePart=0x0) returned 0x4c [0060.718] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\X 5JPt1NErYH.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\x 5jpt1neryh.m4a")) returned 1 [0060.720] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\X 5JPt1NErYH.m4a.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\X 5JPt1NErYH.m4a.sad", lpFilePart=0x0) returned 0x50 [0060.720] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0060.720] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\X 5JPt1NErYH.m4a.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\x 5jpt1neryh.m4a.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.720] GetFileType (hFile=0x270) returned 0x1 [0060.720] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0060.720] GetFileType (hFile=0x270) returned 0x1 [0060.721] WriteFile (in: hFile=0x270, lpBuffer=0x2195c20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2195c20*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.722] WriteFile (in: hFile=0x270, lpBuffer=0x2195c20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2195c20*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.722] WriteFile (in: hFile=0x270, lpBuffer=0x2195c20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2195c20*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.722] WriteFile (in: hFile=0x270, lpBuffer=0x2195c20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2195c20*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.723] WriteFile (in: hFile=0x270, lpBuffer=0x2195c20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2195c20*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.723] WriteFile (in: hFile=0x270, lpBuffer=0x2195c20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2195c20*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.723] WriteFile (in: hFile=0x270, lpBuffer=0x2195c20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2195c20*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.724] WriteFile (in: hFile=0x270, lpBuffer=0x2195c20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2195c20*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.724] WriteFile (in: hFile=0x270, lpBuffer=0x2195c20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2195c20*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.724] WriteFile (in: hFile=0x270, lpBuffer=0x2195c20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2195c20*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.725] WriteFile (in: hFile=0x270, lpBuffer=0x2195c20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2195c20*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.725] WriteFile (in: hFile=0x270, lpBuffer=0x2195c20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2195c20*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.725] WriteFile (in: hFile=0x270, lpBuffer=0x2195c20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2195c20*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.726] WriteFile (in: hFile=0x270, lpBuffer=0x2195c20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2195c20*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.726] WriteFile (in: hFile=0x270, lpBuffer=0x2195c20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2195c20*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.726] WriteFile (in: hFile=0x270, lpBuffer=0x2195c20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2195c20*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.726] WriteFile (in: hFile=0x270, lpBuffer=0x2195c20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2195c20*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.727] WriteFile (in: hFile=0x270, lpBuffer=0x2195c20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2195c20*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.727] WriteFile (in: hFile=0x270, lpBuffer=0x2195c20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2195c20*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.727] WriteFile (in: hFile=0x270, lpBuffer=0x2195c20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2195c20*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.728] WriteFile (in: hFile=0x270, lpBuffer=0x2195c20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2195c20*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.728] WriteFile (in: hFile=0x270, lpBuffer=0x2195c20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2195c20*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.728] WriteFile (in: hFile=0x270, lpBuffer=0x2195c20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x2195c20*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0060.729] WriteFile (in: hFile=0x270, lpBuffer=0x2195c20*, nNumberOfBytesToWrite=0xc94, lpNumberOfBytesWritten=0x14dc18, lpOverlapped=0x0 | out: lpBuffer=0x2195c20*, lpNumberOfBytesWritten=0x14dc18*=0xc94, lpOverlapped=0x0) returned 1 [0060.729] CloseHandle (hObject=0x270) returned 1 [0060.737] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0060.737] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0060.737] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.737] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0060.737] DrawTextExW (in: hdc=0x8010893, lpchText="71 Files\r\nEncrypted", cchText=19, lprc=0x14daf8, format=0x2400, lpdtp=0x2196e18 | out: lpchText="71 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0060.738] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0060.738] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0060.738] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0060.738] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0060.738] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14df70) returned 1 [0060.738] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg", lpFilePart=0x0) returned 0x3b [0060.738] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\", nBufferLength=0x105, lpBuffer=0x14da00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\", lpFilePart=0x0) returned 0x3c [0060.738] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\*", lpFindFileData=0x14dc10 | out: lpFindFileData=0x14dc10) returned 0xa748e0 [0060.738] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0060.740] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0060.740] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0060.740] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0060.740] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0060.741] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0060.741] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0060.741] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0060.741] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 0 [0060.741] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0060.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dec0) returned 1 [0060.741] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de80) returned 1 [0060.741] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0060.741] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0060.741] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0060.741] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0060.741] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14d7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x56 [0060.742] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc80) returned 1 [0060.742] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.742] GetFileType (hFile=0x270) returned 0x1 [0060.742] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dbf0) returned 1 [0060.742] GetFileType (hFile=0x270) returned 0x1 [0060.742] WriteFile (in: hFile=0x270, lpBuffer=0x219a428*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x14dcc8, lpOverlapped=0x0 | out: lpBuffer=0x219a428*, lpNumberOfBytesWritten=0x14dcc8*=0x119, lpOverlapped=0x0) returned 1 [0060.743] CloseHandle (hObject=0x270) returned 1 [0060.743] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0060.743] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0060.743] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14de60) returned 1 [0060.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr", lpFilePart=0x0) returned 0x41 [0060.743] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\", nBufferLength=0x105, lpBuffer=0x14d8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\", lpFilePart=0x0) returned 0x42 [0060.743] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\*", lpFindFileData=0x14db00 | out: lpFindFileData=0x14db00) returned 0xa748e0 [0060.744] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0060.744] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0060.744] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0060.744] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0060.744] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0060.744] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0060.745] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0060.745] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 0 [0060.745] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0060.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14ddb0) returned 1 [0060.745] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd70) returned 1 [0060.745] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0060.745] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0060.745] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0060.745] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0060.745] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\FwUIK7kDEnTtg.m4a", nBufferLength=0x105, lpBuffer=0x14d6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\FwUIK7kDEnTtg.m4a", lpFilePart=0x0) returned 0x53 [0060.745] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14db80) returned 1 [0060.745] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\FwUIK7kDEnTtg.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\fwuik7kdenttg.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.746] GetFileType (hFile=0x270) returned 0x1 [0060.746] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14daf0) returned 1 [0060.746] GetFileType (hFile=0x270) returned 0x1 [0060.746] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14dd18 | out: lpFileSizeHigh=0x14dd18*=0x0) returned 0x14fd2 [0060.746] ReadFile (in: hFile=0x270, lpBuffer=0x1218bc88, nNumberOfBytesToRead=0x14fd2, lpNumberOfBytesRead=0x14dc48, lpOverlapped=0x0 | out: lpBuffer=0x1218bc88*, lpNumberOfBytesRead=0x14dc48*=0x14fd2, lpOverlapped=0x0) returned 1 [0060.747] CloseHandle (hObject=0x270) returned 1 [0060.750] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\FwUIK7kDEnTtg.m4a", nBufferLength=0x105, lpBuffer=0x14d840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\FwUIK7kDEnTtg.m4a", lpFilePart=0x0) returned 0x53 [0060.750] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\FwUIK7kDEnTtg.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\fwuik7kdenttg.m4a")) returned 1 [0060.752] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\FwUIK7kDEnTtg.m4a.sad", nBufferLength=0x105, lpBuffer=0x14d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\FwUIK7kDEnTtg.m4a.sad", lpFilePart=0x0) returned 0x57 [0060.752] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dac0) returned 1 [0060.752] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\FwUIK7kDEnTtg.m4a.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\fwuik7kdenttg.m4a.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.752] GetFileType (hFile=0x270) returned 0x1 [0060.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14da30) returned 1 [0060.753] GetFileType (hFile=0x270) returned 0x1 [0060.753] WriteFile (in: hFile=0x270, lpBuffer=0x219ebb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x219ebb8*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.754] WriteFile (in: hFile=0x270, lpBuffer=0x219ebb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x219ebb8*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.755] WriteFile (in: hFile=0x270, lpBuffer=0x219ebb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x219ebb8*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.755] WriteFile (in: hFile=0x270, lpBuffer=0x219ebb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x219ebb8*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.755] WriteFile (in: hFile=0x270, lpBuffer=0x219ebb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x219ebb8*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.756] WriteFile (in: hFile=0x270, lpBuffer=0x219ebb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x219ebb8*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.756] WriteFile (in: hFile=0x270, lpBuffer=0x219ebb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x219ebb8*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.756] WriteFile (in: hFile=0x270, lpBuffer=0x219ebb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x219ebb8*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.756] WriteFile (in: hFile=0x270, lpBuffer=0x219ebb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x219ebb8*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.756] WriteFile (in: hFile=0x270, lpBuffer=0x219ebb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x219ebb8*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.757] WriteFile (in: hFile=0x270, lpBuffer=0x219ebb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x219ebb8*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.757] WriteFile (in: hFile=0x270, lpBuffer=0x219ebb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x219ebb8*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.757] WriteFile (in: hFile=0x270, lpBuffer=0x219ebb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x219ebb8*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.757] WriteFile (in: hFile=0x270, lpBuffer=0x219ebb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x219ebb8*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.757] WriteFile (in: hFile=0x270, lpBuffer=0x219ebb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x219ebb8*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.758] WriteFile (in: hFile=0x270, lpBuffer=0x219ebb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x219ebb8*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.758] WriteFile (in: hFile=0x270, lpBuffer=0x219ebb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x219ebb8*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.758] WriteFile (in: hFile=0x270, lpBuffer=0x219ebb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x219ebb8*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.758] WriteFile (in: hFile=0x270, lpBuffer=0x219ebb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x219ebb8*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.759] WriteFile (in: hFile=0x270, lpBuffer=0x219ebb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x219ebb8*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.759] WriteFile (in: hFile=0x270, lpBuffer=0x219ebb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x219ebb8*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.759] WriteFile (in: hFile=0x270, lpBuffer=0x219ebb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x219ebb8*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.759] WriteFile (in: hFile=0x270, lpBuffer=0x219ebb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x219ebb8*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.759] WriteFile (in: hFile=0x270, lpBuffer=0x219ebb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x219ebb8*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.759] WriteFile (in: hFile=0x270, lpBuffer=0x219ebb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x219ebb8*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.760] WriteFile (in: hFile=0x270, lpBuffer=0x219ebb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x219ebb8*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.760] WriteFile (in: hFile=0x270, lpBuffer=0x219ebb8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x219ebb8*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.760] WriteFile (in: hFile=0x270, lpBuffer=0x219ebb8*, nNumberOfBytesToWrite=0xfc4, lpNumberOfBytesWritten=0x14db08, lpOverlapped=0x0 | out: lpBuffer=0x219ebb8*, lpNumberOfBytesWritten=0x14db08*=0xfc4, lpOverlapped=0x0) returned 1 [0060.760] CloseHandle (hObject=0x270) returned 1 [0060.762] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0060.762] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0060.763] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.763] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0060.763] DrawTextExW (in: hdc=0x8010893, lpchText="72 Files\r\nEncrypted", cchText=19, lprc=0x14d9e8, format=0x2400, lpdtp=0x219fdb0 | out: lpchText="72 Files\r\nEncrypted", lprc=0x14d9e8) returned 26 [0060.763] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0060.763] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0060.763] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0060.763] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0060.763] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0060.763] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0060.763] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\ieq2XVRo9MKPSort_MSo.m4a", nBufferLength=0x105, lpBuffer=0x14d6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\ieq2XVRo9MKPSort_MSo.m4a", lpFilePart=0x0) returned 0x5a [0060.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14db80) returned 1 [0060.763] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\ieq2XVRo9MKPSort_MSo.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\ieq2xvro9mkpsort_mso.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.763] GetFileType (hFile=0x270) returned 0x1 [0060.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14daf0) returned 1 [0060.763] GetFileType (hFile=0x270) returned 0x1 [0060.763] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14dd18 | out: lpFileSizeHigh=0x14dd18*=0x0) returned 0x14113 [0060.764] ReadFile (in: hFile=0x270, lpBuffer=0x21a0250, nNumberOfBytesToRead=0x14113, lpNumberOfBytesRead=0x14dc48, lpOverlapped=0x0 | out: lpBuffer=0x21a0250*, lpNumberOfBytesRead=0x14dc48*=0x14113, lpOverlapped=0x0) returned 1 [0060.765] CloseHandle (hObject=0x270) returned 1 [0060.768] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\ieq2XVRo9MKPSort_MSo.m4a", nBufferLength=0x105, lpBuffer=0x14d840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\ieq2XVRo9MKPSort_MSo.m4a", lpFilePart=0x0) returned 0x5a [0060.768] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\ieq2XVRo9MKPSort_MSo.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\ieq2xvro9mkpsort_mso.m4a")) returned 1 [0060.782] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\ieq2XVRo9MKPSort_MSo.m4a.sad", nBufferLength=0x105, lpBuffer=0x14d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\ieq2XVRo9MKPSort_MSo.m4a.sad", lpFilePart=0x0) returned 0x5e [0060.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dac0) returned 1 [0060.783] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\ieq2XVRo9MKPSort_MSo.m4a.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\ieq2xvro9mkpsort_mso.m4a.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.783] GetFileType (hFile=0x270) returned 0x1 [0060.783] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14da30) returned 1 [0060.783] GetFileType (hFile=0x270) returned 0x1 [0060.783] WriteFile (in: hFile=0x270, lpBuffer=0x21b5c28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21b5c28*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.784] WriteFile (in: hFile=0x270, lpBuffer=0x21b5c28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21b5c28*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.785] WriteFile (in: hFile=0x270, lpBuffer=0x21b5c28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21b5c28*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.785] WriteFile (in: hFile=0x270, lpBuffer=0x21b5c28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21b5c28*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.785] WriteFile (in: hFile=0x270, lpBuffer=0x21b5c28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21b5c28*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.785] WriteFile (in: hFile=0x270, lpBuffer=0x21b5c28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21b5c28*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.785] WriteFile (in: hFile=0x270, lpBuffer=0x21b5c28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21b5c28*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.786] WriteFile (in: hFile=0x270, lpBuffer=0x21b5c28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21b5c28*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.786] WriteFile (in: hFile=0x270, lpBuffer=0x21b5c28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21b5c28*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.786] WriteFile (in: hFile=0x270, lpBuffer=0x21b5c28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21b5c28*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.786] WriteFile (in: hFile=0x270, lpBuffer=0x21b5c28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21b5c28*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.786] WriteFile (in: hFile=0x270, lpBuffer=0x21b5c28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21b5c28*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.787] WriteFile (in: hFile=0x270, lpBuffer=0x21b5c28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21b5c28*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.787] WriteFile (in: hFile=0x270, lpBuffer=0x21b5c28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21b5c28*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.787] WriteFile (in: hFile=0x270, lpBuffer=0x21b5c28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21b5c28*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.787] WriteFile (in: hFile=0x270, lpBuffer=0x21b5c28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21b5c28*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.787] WriteFile (in: hFile=0x270, lpBuffer=0x21b5c28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21b5c28*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.788] WriteFile (in: hFile=0x270, lpBuffer=0x21b5c28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21b5c28*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.788] WriteFile (in: hFile=0x270, lpBuffer=0x21b5c28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21b5c28*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.788] WriteFile (in: hFile=0x270, lpBuffer=0x21b5c28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21b5c28*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.788] WriteFile (in: hFile=0x270, lpBuffer=0x21b5c28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21b5c28*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.788] WriteFile (in: hFile=0x270, lpBuffer=0x21b5c28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21b5c28*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.789] WriteFile (in: hFile=0x270, lpBuffer=0x21b5c28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21b5c28*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.789] WriteFile (in: hFile=0x270, lpBuffer=0x21b5c28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21b5c28*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.789] WriteFile (in: hFile=0x270, lpBuffer=0x21b5c28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21b5c28*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.789] WriteFile (in: hFile=0x270, lpBuffer=0x21b5c28*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x21b5c28*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0060.789] WriteFile (in: hFile=0x270, lpBuffer=0x21b5c28*, nNumberOfBytesToWrite=0xc1c, lpNumberOfBytesWritten=0x14db08, lpOverlapped=0x0 | out: lpBuffer=0x21b5c28*, lpNumberOfBytesWritten=0x14db08*=0xc1c, lpOverlapped=0x0) returned 1 [0060.789] CloseHandle (hObject=0x270) returned 1 [0060.791] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0060.791] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0060.791] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.791] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0060.792] DrawTextExW (in: hdc=0x8010893, lpchText="73 Files\r\nEncrypted", cchText=19, lprc=0x14d9e8, format=0x2400, lpdtp=0x21b6e20 | out: lpchText="73 Files\r\nEncrypted", lprc=0x14d9e8) returned 26 [0060.792] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0060.792] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0060.792] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0060.792] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0060.792] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0060.792] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0060.792] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\qo1odpQd.mp3", nBufferLength=0x105, lpBuffer=0x14d6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\qo1odpQd.mp3", lpFilePart=0x0) returned 0x4e [0060.792] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14db80) returned 1 [0060.792] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\qo1odpQd.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\qo1odpqd.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.793] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14daf0) returned 1 [0060.793] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14dd18 | out: lpFileSizeHigh=0x14dd18*=0x0) returned 0x153bf [0060.793] ReadFile (in: hFile=0x270, lpBuffer=0x1220e4d8, nNumberOfBytesToRead=0x153bf, lpNumberOfBytesRead=0x14dc48, lpOverlapped=0x0 | out: lpBuffer=0x1220e4d8*, lpNumberOfBytesRead=0x14dc48*=0x153bf, lpOverlapped=0x0) returned 1 [0060.798] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\qo1odpQd.mp3", nBufferLength=0x105, lpBuffer=0x14d840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\qo1odpQd.mp3", lpFilePart=0x0) returned 0x4e [0060.798] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\qo1odpQd.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\qo1odpqd.mp3")) returned 1 [0060.800] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\qo1odpQd.mp3.sad", nBufferLength=0x105, lpBuffer=0x14d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\qo1odpQd.mp3.sad", lpFilePart=0x0) returned 0x52 [0060.800] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dac0) returned 1 [0060.800] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\qo1odpQd.mp3.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\qo1odpqd.mp3.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.800] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14da30) returned 1 [0060.804] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0060.804] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0060.805] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.805] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0060.805] DrawTextExW (in: hdc=0x8010893, lpchText="74 Files\r\nEncrypted", cchText=19, lprc=0x14d9e8, format=0x2400, lpdtp=0x21b9cb8 | out: lpchText="74 Files\r\nEncrypted", lprc=0x14d9e8) returned 26 [0060.805] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0060.805] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0060.805] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0060.805] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0060.805] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0060.805] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0060.805] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0060.805] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0060.805] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14de60) returned 1 [0060.805] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr", lpFilePart=0x0) returned 0x41 [0060.805] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\", nBufferLength=0x105, lpBuffer=0x14d8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\", lpFilePart=0x0) returned 0x42 [0060.805] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\*", lpFindFileData=0x14db00 | out: lpFindFileData=0x14db00) returned 0xa748e0 [0060.805] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0060.806] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0060.806] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0060.806] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0060.806] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0060.806] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0060.806] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0060.807] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 0 [0060.807] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0060.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14ddb0) returned 1 [0060.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd70) returned 1 [0060.807] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0060.807] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0060.807] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0060.807] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0060.807] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x6b [0060.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14db70) returned 1 [0060.807] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\-qtxcuxo6pxrrnfjhw72\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.807] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dae0) returned 1 [0060.809] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0060.809] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0060.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dd50) returned 1 [0060.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72", nBufferLength=0x105, lpBuffer=0x14d840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72", lpFilePart=0x0) returned 0x56 [0060.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\", nBufferLength=0x105, lpBuffer=0x14d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\", lpFilePart=0x0) returned 0x57 [0060.809] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\*", lpFindFileData=0x14d9f0 | out: lpFindFileData=0x14d9f0) returned 0xa748e0 [0060.809] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0060.810] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0060.810] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0060.810] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0060.810] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0060.810] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0060.810] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0060.810] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0060.811] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 0 [0060.811] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0060.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dca0) returned 1 [0060.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc60) returned 1 [0060.811] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0060.811] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0060.811] GetCurrentActCtx (in: lphActCtx=0x14dc00 | out: lphActCtx=0x14dc00*=0xa52648) returned 1 [0060.811] PeekMessageW (in: lpMsg=0x14db50, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14db50) returned 0 [0060.811] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\1lRoAfslce1.m4a", nBufferLength=0x105, lpBuffer=0x14d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\1lRoAfslce1.m4a", lpFilePart=0x0) returned 0x66 [0060.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14da70) returned 1 [0060.811] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\1lRoAfslce1.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\-qtxcuxo6pxrrnfjhw72\\1lroafslce1.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d9e0) returned 1 [0060.811] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14dc08 | out: lpFileSizeHigh=0x14dc08*=0x0) returned 0x2a43 [0060.812] ReadFile (in: hFile=0x270, lpBuffer=0x21c0be8, nNumberOfBytesToRead=0x2a43, lpNumberOfBytesRead=0x14db38, lpOverlapped=0x0 | out: lpBuffer=0x21c0be8*, lpNumberOfBytesRead=0x14db38*=0x2a43, lpOverlapped=0x0) returned 1 [0060.812] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\1lRoAfslce1.m4a", nBufferLength=0x105, lpBuffer=0x14d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\1lRoAfslce1.m4a", lpFilePart=0x0) returned 0x66 [0060.812] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\1lRoAfslce1.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\-qtxcuxo6pxrrnfjhw72\\1lroafslce1.m4a")) returned 1 [0060.814] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\1lRoAfslce1.m4a.sad", nBufferLength=0x105, lpBuffer=0x14d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\1lRoAfslce1.m4a.sad", lpFilePart=0x0) returned 0x6a [0060.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14d9b0) returned 1 [0060.814] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\1lRoAfslce1.m4a.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\-qtxcuxo6pxrrnfjhw72\\1lroafslce1.m4a.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.814] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d920) returned 1 [0060.815] GetCurrentActCtx (in: lphActCtx=0x14dc00 | out: lphActCtx=0x14dc00*=0xa52648) returned 1 [0060.815] PeekMessageW (in: lpMsg=0x14db50, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14db50) returned 0 [0060.815] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.815] AdjustWindowRectEx (in: lpRect=0x14d968, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d968) returned 1 [0060.816] DrawTextExW (in: hdc=0x8010893, lpchText="75 Files\r\nEncrypted", cchText=19, lprc=0x14d8d8, format=0x2400, lpdtp=0x21cd1f0 | out: lpchText="75 Files\r\nEncrypted", lprc=0x14d8d8) returned 26 [0060.816] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0060.816] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0060.816] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0060.816] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0060.816] GetCurrentActCtx (in: lphActCtx=0x14dc00 | out: lphActCtx=0x14dc00*=0xa52648) returned 1 [0060.816] PeekMessageW (in: lpMsg=0x14db50, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14db50) returned 0 [0060.816] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\6SChOwRSHzs2I7gDNM.m4a", nBufferLength=0x105, lpBuffer=0x14d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\6SChOwRSHzs2I7gDNM.m4a", lpFilePart=0x0) returned 0x6d [0060.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14da70) returned 1 [0060.816] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\6SChOwRSHzs2I7gDNM.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\-qtxcuxo6pxrrnfjhw72\\6schowrshzs2i7gdnm.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d9e0) returned 1 [0060.816] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14dc08 | out: lpFileSizeHigh=0x14dc08*=0x0) returned 0xe6e7 [0060.816] ReadFile (in: hFile=0x270, lpBuffer=0x21cd6a8, nNumberOfBytesToRead=0xe6e7, lpNumberOfBytesRead=0x14db38, lpOverlapped=0x0 | out: lpBuffer=0x21cd6a8*, lpNumberOfBytesRead=0x14db38*=0xe6e7, lpOverlapped=0x0) returned 1 [0060.819] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\6SChOwRSHzs2I7gDNM.m4a", nBufferLength=0x105, lpBuffer=0x14d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\6SChOwRSHzs2I7gDNM.m4a", lpFilePart=0x0) returned 0x6d [0060.820] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\6SChOwRSHzs2I7gDNM.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\-qtxcuxo6pxrrnfjhw72\\6schowrshzs2i7gdnm.m4a")) returned 1 [0060.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\6SChOwRSHzs2I7gDNM.m4a.sad", nBufferLength=0x105, lpBuffer=0x14d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\6SChOwRSHzs2I7gDNM.m4a.sad", lpFilePart=0x0) returned 0x71 [0060.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14d9b0) returned 1 [0060.821] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\6SChOwRSHzs2I7gDNM.m4a.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\-qtxcuxo6pxrrnfjhw72\\6schowrshzs2i7gdnm.m4a.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d920) returned 1 [0060.824] GetCurrentActCtx (in: lphActCtx=0x14dc00 | out: lphActCtx=0x14dc00*=0xa52648) returned 1 [0060.824] PeekMessageW (in: lpMsg=0x14db50, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14db50) returned 0 [0060.824] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.824] AdjustWindowRectEx (in: lpRect=0x14d968, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d968) returned 1 [0060.824] DrawTextExW (in: hdc=0x8010893, lpchText="76 Files\r\nEncrypted", cchText=19, lprc=0x14d8d8, format=0x2400, lpdtp=0x21de8b8 | out: lpchText="76 Files\r\nEncrypted", lprc=0x14d8d8) returned 26 [0060.824] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0060.824] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0060.824] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0060.825] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0060.825] GetCurrentActCtx (in: lphActCtx=0x14dc00 | out: lphActCtx=0x14dc00*=0xa52648) returned 1 [0060.825] PeekMessageW (in: lpMsg=0x14db50, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14db50) returned 0 [0060.825] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\7K4RBpmdE11x5Nmwq.mp3", nBufferLength=0x105, lpBuffer=0x14d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\7K4RBpmdE11x5Nmwq.mp3", lpFilePart=0x0) returned 0x6c [0060.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14da70) returned 1 [0060.825] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\7K4RBpmdE11x5Nmwq.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\-qtxcuxo6pxrrnfjhw72\\7k4rbpmde11x5nmwq.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d9e0) returned 1 [0060.825] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14dc08 | out: lpFileSizeHigh=0x14dc08*=0x0) returned 0x17849 [0060.826] ReadFile (in: hFile=0x270, lpBuffer=0x12282b10, nNumberOfBytesToRead=0x17849, lpNumberOfBytesRead=0x14db38, lpOverlapped=0x0 | out: lpBuffer=0x12282b10*, lpNumberOfBytesRead=0x14db38*=0x17849, lpOverlapped=0x0) returned 1 [0060.829] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\7K4RBpmdE11x5Nmwq.mp3", nBufferLength=0x105, lpBuffer=0x14d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\7K4RBpmdE11x5Nmwq.mp3", lpFilePart=0x0) returned 0x6c [0060.829] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\7K4RBpmdE11x5Nmwq.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\-qtxcuxo6pxrrnfjhw72\\7k4rbpmde11x5nmwq.mp3")) returned 1 [0060.831] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\7K4RBpmdE11x5Nmwq.mp3.sad", nBufferLength=0x105, lpBuffer=0x14d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\7K4RBpmdE11x5Nmwq.mp3.sad", lpFilePart=0x0) returned 0x70 [0060.831] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14d9b0) returned 1 [0060.831] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\7K4RBpmdE11x5Nmwq.mp3.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\-qtxcuxo6pxrrnfjhw72\\7k4rbpmde11x5nmwq.mp3.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.831] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d920) returned 1 [0060.834] GetCurrentActCtx (in: lphActCtx=0x14dc00 | out: lphActCtx=0x14dc00*=0xa52648) returned 1 [0060.835] PeekMessageW (in: lpMsg=0x14db50, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14db50) returned 0 [0060.835] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.835] AdjustWindowRectEx (in: lpRect=0x14d968, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d968) returned 1 [0060.835] DrawTextExW (in: hdc=0x8010893, lpchText="77 Files\r\nEncrypted", cchText=19, lprc=0x14d8d8, format=0x2400, lpdtp=0x21e1880 | out: lpchText="77 Files\r\nEncrypted", lprc=0x14d8d8) returned 26 [0060.835] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0060.835] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0060.835] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0060.835] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0060.835] GetCurrentActCtx (in: lphActCtx=0x14dc00 | out: lphActCtx=0x14dc00*=0xa52648) returned 1 [0060.835] PeekMessageW (in: lpMsg=0x14db50, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14db50) returned 0 [0060.835] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\or7BTgPFUiqeM5h4.wav", nBufferLength=0x105, lpBuffer=0x14d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\or7BTgPFUiqeM5h4.wav", lpFilePart=0x0) returned 0x6b [0060.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14da70) returned 1 [0060.835] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\or7BTgPFUiqeM5h4.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\-qtxcuxo6pxrrnfjhw72\\or7btgpfuiqem5h4.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d9e0) returned 1 [0060.836] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14dc08 | out: lpFileSizeHigh=0x14dc08*=0x0) returned 0x41ac [0060.836] ReadFile (in: hFile=0x270, lpBuffer=0x21e1d30, nNumberOfBytesToRead=0x41ac, lpNumberOfBytesRead=0x14db38, lpOverlapped=0x0 | out: lpBuffer=0x21e1d30*, lpNumberOfBytesRead=0x14db38*=0x41ac, lpOverlapped=0x0) returned 1 [0060.837] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\or7BTgPFUiqeM5h4.wav", nBufferLength=0x105, lpBuffer=0x14d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\or7BTgPFUiqeM5h4.wav", lpFilePart=0x0) returned 0x6b [0060.837] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\or7BTgPFUiqeM5h4.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\-qtxcuxo6pxrrnfjhw72\\or7btgpfuiqem5h4.wav")) returned 1 [0060.838] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\or7BTgPFUiqeM5h4.wav.sad", nBufferLength=0x105, lpBuffer=0x14d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\or7BTgPFUiqeM5h4.wav.sad", lpFilePart=0x0) returned 0x6f [0060.838] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14d9b0) returned 1 [0060.838] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\or7BTgPFUiqeM5h4.wav.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\-qtxcuxo6pxrrnfjhw72\\or7btgpfuiqem5h4.wav.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d920) returned 1 [0060.840] GetCurrentActCtx (in: lphActCtx=0x14dc00 | out: lphActCtx=0x14dc00*=0xa52648) returned 1 [0060.840] PeekMessageW (in: lpMsg=0x14db50, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14db50) returned 0 [0060.840] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.840] AdjustWindowRectEx (in: lpRect=0x14d968, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d968) returned 1 [0060.840] DrawTextExW (in: hdc=0x8010893, lpchText="78 Files\r\nEncrypted", cchText=19, lprc=0x14d8d8, format=0x2400, lpdtp=0x21f3930 | out: lpchText="78 Files\r\nEncrypted", lprc=0x14d8d8) returned 26 [0060.840] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0060.840] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0060.840] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0060.840] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0060.840] GetCurrentActCtx (in: lphActCtx=0x14dc00 | out: lphActCtx=0x14dc00*=0xa52648) returned 1 [0060.840] PeekMessageW (in: lpMsg=0x14db50, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14db50) returned 0 [0060.840] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\p42w-qed9Ml_.wav", nBufferLength=0x105, lpBuffer=0x14d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\p42w-qed9Ml_.wav", lpFilePart=0x0) returned 0x67 [0060.840] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14da70) returned 1 [0060.840] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\p42w-qed9Ml_.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\-qtxcuxo6pxrrnfjhw72\\p42w-qed9ml_.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d9e0) returned 1 [0060.841] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14dc08 | out: lpFileSizeHigh=0x14dc08*=0x0) returned 0x748a [0060.841] ReadFile (in: hFile=0x270, lpBuffer=0x21f3dc8, nNumberOfBytesToRead=0x748a, lpNumberOfBytesRead=0x14db38, lpOverlapped=0x0 | out: lpBuffer=0x21f3dc8*, lpNumberOfBytesRead=0x14db38*=0x748a, lpOverlapped=0x0) returned 1 [0060.842] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\p42w-qed9Ml_.wav", nBufferLength=0x105, lpBuffer=0x14d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\p42w-qed9Ml_.wav", lpFilePart=0x0) returned 0x67 [0060.842] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\p42w-qed9Ml_.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\-qtxcuxo6pxrrnfjhw72\\p42w-qed9ml_.wav")) returned 1 [0060.843] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\p42w-qed9Ml_.wav.sad", nBufferLength=0x105, lpBuffer=0x14d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\p42w-qed9Ml_.wav.sad", lpFilePart=0x0) returned 0x6b [0060.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14d9b0) returned 1 [0060.843] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\p42w-qed9Ml_.wav.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\-qtxcuxo6pxrrnfjhw72\\p42w-qed9ml_.wav.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d920) returned 1 [0060.845] GetCurrentActCtx (in: lphActCtx=0x14dc00 | out: lphActCtx=0x14dc00*=0xa52648) returned 1 [0060.845] PeekMessageW (in: lpMsg=0x14db50, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14db50) returned 0 [0060.845] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.845] AdjustWindowRectEx (in: lpRect=0x14d968, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d968) returned 1 [0060.845] DrawTextExW (in: hdc=0x8010893, lpchText="79 Files\r\nEncrypted", cchText=19, lprc=0x14d8d8, format=0x2400, lpdtp=0x2211430 | out: lpchText="79 Files\r\nEncrypted", lprc=0x14d8d8) returned 26 [0060.846] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0060.846] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0060.846] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0060.846] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0060.846] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0060.846] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0060.846] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0060.846] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0060.846] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dd50) returned 1 [0060.846] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72", nBufferLength=0x105, lpBuffer=0x14d840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72", lpFilePart=0x0) returned 0x56 [0060.846] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\", nBufferLength=0x105, lpBuffer=0x14d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\", lpFilePart=0x0) returned 0x57 [0060.846] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\*", lpFindFileData=0x14d9f0 | out: lpFindFileData=0x14d9f0) returned 0xa748e0 [0060.847] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0060.847] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0060.847] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0060.847] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0060.847] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0060.848] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0060.848] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0060.848] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0060.848] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 0 [0060.848] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0060.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dca0) returned 1 [0060.848] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc60) returned 1 [0060.848] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0060.849] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0060.849] GetCurrentActCtx (in: lphActCtx=0x14dcb0 | out: lphActCtx=0x14dcb0*=0xa52648) returned 1 [0060.849] PeekMessageW (in: lpMsg=0x14dc00, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc00) returned 0 [0060.849] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14d580, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x75 [0060.849] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14da60) returned 1 [0060.849] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\-qtxcuxo6pxrrnfjhw72\\8uanyoiyh\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d9d0) returned 1 [0060.850] GetCurrentActCtx (in: lphActCtx=0x14dcb0 | out: lphActCtx=0x14dcb0*=0xa52648) returned 1 [0060.850] PeekMessageW (in: lpMsg=0x14dc00, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc00) returned 0 [0060.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc40) returned 1 [0060.850] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh", nBufferLength=0x105, lpBuffer=0x14d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh", lpFilePart=0x0) returned 0x60 [0060.850] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\", nBufferLength=0x105, lpBuffer=0x14d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\", lpFilePart=0x0) returned 0x61 [0060.850] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\*", lpFindFileData=0x14d8e0 | out: lpFindFileData=0x14d8e0) returned 0xa748e0 [0060.850] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14d930 | out: lpFindFileData=0x14d930) returned 1 [0060.851] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14d930 | out: lpFindFileData=0x14d930) returned 1 [0060.851] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14d930 | out: lpFindFileData=0x14d930) returned 1 [0060.851] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14d930 | out: lpFindFileData=0x14d930) returned 1 [0060.851] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14d930 | out: lpFindFileData=0x14d930) returned 1 [0060.851] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14d930 | out: lpFindFileData=0x14d930) returned 1 [0060.851] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14d930 | out: lpFindFileData=0x14d930) returned 0 [0060.851] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0060.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db90) returned 1 [0060.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db50) returned 1 [0060.852] GetCurrentActCtx (in: lphActCtx=0x14dcb0 | out: lphActCtx=0x14dcb0*=0xa52648) returned 1 [0060.852] PeekMessageW (in: lpMsg=0x14dc00, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc00) returned 0 [0060.852] GetCurrentActCtx (in: lphActCtx=0x14daf0 | out: lphActCtx=0x14daf0*=0xa52648) returned 1 [0060.852] PeekMessageW (in: lpMsg=0x14da40, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14da40) returned 0 [0060.852] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\0RjUufgwu.mp3", nBufferLength=0x105, lpBuffer=0x14d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\0RjUufgwu.mp3", lpFilePart=0x0) returned 0x6e [0060.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14d960) returned 1 [0060.852] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\0RjUufgwu.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\-qtxcuxo6pxrrnfjhw72\\8uanyoiyh\\0rjuufgwu.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d8d0) returned 1 [0060.852] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14daf8 | out: lpFileSizeHigh=0x14daf8*=0x0) returned 0xe120 [0060.852] ReadFile (in: hFile=0x270, lpBuffer=0x2218678, nNumberOfBytesToRead=0xe120, lpNumberOfBytesRead=0x14da28, lpOverlapped=0x0 | out: lpBuffer=0x2218678*, lpNumberOfBytesRead=0x14da28*=0xe120, lpOverlapped=0x0) returned 1 [0060.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\0RjUufgwu.mp3", nBufferLength=0x105, lpBuffer=0x14d620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\0RjUufgwu.mp3", lpFilePart=0x0) returned 0x6e [0060.855] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\0RjUufgwu.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\-qtxcuxo6pxrrnfjhw72\\8uanyoiyh\\0rjuufgwu.mp3")) returned 1 [0060.856] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\0RjUufgwu.mp3.sad", nBufferLength=0x105, lpBuffer=0x14d3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\0RjUufgwu.mp3.sad", lpFilePart=0x0) returned 0x72 [0060.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14d8a0) returned 1 [0060.856] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\0RjUufgwu.mp3.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\-qtxcuxo6pxrrnfjhw72\\8uanyoiyh\\0rjuufgwu.mp3.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d810) returned 1 [0060.859] GetCurrentActCtx (in: lphActCtx=0x14daf0 | out: lphActCtx=0x14daf0*=0xa52648) returned 1 [0060.859] PeekMessageW (in: lpMsg=0x14da40, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14da40) returned 0 [0060.859] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.859] AdjustWindowRectEx (in: lpRect=0x14d858, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d858) returned 1 [0060.859] DrawTextExW (in: hdc=0x8010893, lpchText="80 Files\r\nEncrypted", cchText=19, lprc=0x14d7c8, format=0x2400, lpdtp=0x22292b0 | out: lpchText="80 Files\r\nEncrypted", lprc=0x14d7c8) returned 26 [0060.859] GetCurrentActCtx (in: lphActCtx=0x14dcb0 | out: lphActCtx=0x14dcb0*=0xa52648) returned 1 [0060.859] PeekMessageW (in: lpMsg=0x14dc00, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc00) returned 0 [0060.859] GetCurrentActCtx (in: lphActCtx=0x14dcb0 | out: lphActCtx=0x14dcb0*=0xa52648) returned 1 [0060.859] PeekMessageW (in: lpMsg=0x14dc00, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc00) returned 0 [0060.860] GetCurrentActCtx (in: lphActCtx=0x14daf0 | out: lphActCtx=0x14daf0*=0xa52648) returned 1 [0060.860] PeekMessageW (in: lpMsg=0x14da40, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14da40) returned 0 [0060.860] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\H5hJu0.wav", nBufferLength=0x105, lpBuffer=0x14d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\H5hJu0.wav", lpFilePart=0x0) returned 0x6b [0060.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14d960) returned 1 [0060.860] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\H5hJu0.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\-qtxcuxo6pxrrnfjhw72\\8uanyoiyh\\h5hju0.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d8d0) returned 1 [0060.860] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14daf8 | out: lpFileSizeHigh=0x14daf8*=0x0) returned 0xdfab [0060.860] ReadFile (in: hFile=0x270, lpBuffer=0x2229730, nNumberOfBytesToRead=0xdfab, lpNumberOfBytesRead=0x14da28, lpOverlapped=0x0 | out: lpBuffer=0x2229730*, lpNumberOfBytesRead=0x14da28*=0xdfab, lpOverlapped=0x0) returned 1 [0060.862] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\H5hJu0.wav", nBufferLength=0x105, lpBuffer=0x14d620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\H5hJu0.wav", lpFilePart=0x0) returned 0x6b [0060.862] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\H5hJu0.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\-qtxcuxo6pxrrnfjhw72\\8uanyoiyh\\h5hju0.wav")) returned 1 [0060.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\H5hJu0.wav.sad", nBufferLength=0x105, lpBuffer=0x14d3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\H5hJu0.wav.sad", lpFilePart=0x0) returned 0x6f [0060.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14d8a0) returned 1 [0060.864] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\H5hJu0.wav.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\-qtxcuxo6pxrrnfjhw72\\8uanyoiyh\\h5hju0.wav.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d810) returned 1 [0060.867] GetCurrentActCtx (in: lphActCtx=0x14daf0 | out: lphActCtx=0x14daf0*=0xa52648) returned 1 [0060.867] PeekMessageW (in: lpMsg=0x14da40, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14da40) returned 0 [0060.867] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.867] AdjustWindowRectEx (in: lpRect=0x14d858, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d858) returned 1 [0060.867] DrawTextExW (in: hdc=0x8010893, lpchText="81 Files\r\nEncrypted", cchText=19, lprc=0x14d7c8, format=0x2400, lpdtp=0x223a1d8 | out: lpchText="81 Files\r\nEncrypted", lprc=0x14d7c8) returned 26 [0060.867] GetCurrentActCtx (in: lphActCtx=0x14dcb0 | out: lphActCtx=0x14dcb0*=0xa52648) returned 1 [0060.868] PeekMessageW (in: lpMsg=0x14dc00, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc00) returned 0 [0060.868] GetCurrentActCtx (in: lphActCtx=0x14dcb0 | out: lphActCtx=0x14dcb0*=0xa52648) returned 1 [0060.868] PeekMessageW (in: lpMsg=0x14dc00, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc00) returned 0 [0060.868] GetCurrentActCtx (in: lphActCtx=0x14dcb0 | out: lphActCtx=0x14dcb0*=0xa52648) returned 1 [0060.868] PeekMessageW (in: lpMsg=0x14dc00, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc00) returned 0 [0060.868] GetCurrentActCtx (in: lphActCtx=0x14dcb0 | out: lphActCtx=0x14dcb0*=0xa52648) returned 1 [0060.868] PeekMessageW (in: lpMsg=0x14dc00, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc00) returned 0 [0060.868] GetCurrentActCtx (in: lphActCtx=0x14daf0 | out: lphActCtx=0x14daf0*=0xa52648) returned 1 [0060.868] PeekMessageW (in: lpMsg=0x14da40, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14da40) returned 0 [0060.868] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\UtZj7c3lm4pVa0uBOn0s.m4a", nBufferLength=0x105, lpBuffer=0x14d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\UtZj7c3lm4pVa0uBOn0s.m4a", lpFilePart=0x0) returned 0x79 [0060.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14d960) returned 1 [0060.868] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\UtZj7c3lm4pVa0uBOn0s.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\-qtxcuxo6pxrrnfjhw72\\8uanyoiyh\\utzj7c3lm4pva0ubon0s.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d8d0) returned 1 [0060.868] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14daf8 | out: lpFileSizeHigh=0x14daf8*=0x0) returned 0x18740 [0060.869] ReadFile (in: hFile=0x270, lpBuffer=0x12323c98, nNumberOfBytesToRead=0x18740, lpNumberOfBytesRead=0x14da28, lpOverlapped=0x0 | out: lpBuffer=0x12323c98*, lpNumberOfBytesRead=0x14da28*=0x18740, lpOverlapped=0x0) returned 1 [0060.872] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\UtZj7c3lm4pVa0uBOn0s.m4a", nBufferLength=0x105, lpBuffer=0x14d620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\UtZj7c3lm4pVa0uBOn0s.m4a", lpFilePart=0x0) returned 0x79 [0060.873] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\UtZj7c3lm4pVa0uBOn0s.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\-qtxcuxo6pxrrnfjhw72\\8uanyoiyh\\utzj7c3lm4pva0ubon0s.m4a")) returned 1 [0060.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\UtZj7c3lm4pVa0uBOn0s.m4a.sad", nBufferLength=0x105, lpBuffer=0x14d3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\UtZj7c3lm4pVa0uBOn0s.m4a.sad", lpFilePart=0x0) returned 0x7d [0060.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14d8a0) returned 1 [0060.874] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\UtZj7c3lm4pVa0uBOn0s.m4a.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\-qtxcuxo6pxrrnfjhw72\\8uanyoiyh\\utzj7c3lm4pva0ubon0s.m4a.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d810) returned 1 [0060.879] GetCurrentActCtx (in: lphActCtx=0x14daf0 | out: lphActCtx=0x14daf0*=0xa52648) returned 1 [0060.880] PeekMessageW (in: lpMsg=0x14da40, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14da40) returned 0 [0060.880] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.880] AdjustWindowRectEx (in: lpRect=0x14d858, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d858) returned 1 [0060.880] DrawTextExW (in: hdc=0x8010893, lpchText="82 Files\r\nEncrypted", cchText=19, lprc=0x14d7c8, format=0x2400, lpdtp=0x223d420 | out: lpchText="82 Files\r\nEncrypted", lprc=0x14d7c8) returned 26 [0060.880] GetCurrentActCtx (in: lphActCtx=0x14dcb0 | out: lphActCtx=0x14dcb0*=0xa52648) returned 1 [0060.880] PeekMessageW (in: lpMsg=0x14dc00, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc00) returned 0 [0060.880] GetCurrentActCtx (in: lphActCtx=0x14dcb0 | out: lphActCtx=0x14dcb0*=0xa52648) returned 1 [0060.880] PeekMessageW (in: lpMsg=0x14dc00, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc00) returned 0 [0060.880] GetCurrentActCtx (in: lphActCtx=0x14daf0 | out: lphActCtx=0x14daf0*=0xa52648) returned 1 [0060.880] PeekMessageW (in: lpMsg=0x14da40, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14da40) returned 0 [0060.880] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\UZcAFcQa-Q2OoSUA.mp3", nBufferLength=0x105, lpBuffer=0x14d480, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\UZcAFcQa-Q2OoSUA.mp3", lpFilePart=0x0) returned 0x75 [0060.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14d960) returned 1 [0060.880] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\UZcAFcQa-Q2OoSUA.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\-qtxcuxo6pxrrnfjhw72\\8uanyoiyh\\uzcafcqa-q2oosua.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d8d0) returned 1 [0060.881] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14daf8 | out: lpFileSizeHigh=0x14daf8*=0x0) returned 0x84ea [0060.881] ReadFile (in: hFile=0x270, lpBuffer=0x223d8e8, nNumberOfBytesToRead=0x84ea, lpNumberOfBytesRead=0x14da28, lpOverlapped=0x0 | out: lpBuffer=0x223d8e8*, lpNumberOfBytesRead=0x14da28*=0x84ea, lpOverlapped=0x0) returned 1 [0060.882] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\UZcAFcQa-Q2OoSUA.mp3", nBufferLength=0x105, lpBuffer=0x14d620, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\UZcAFcQa-Q2OoSUA.mp3", lpFilePart=0x0) returned 0x75 [0060.883] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\UZcAFcQa-Q2OoSUA.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\-qtxcuxo6pxrrnfjhw72\\8uanyoiyh\\uzcafcqa-q2oosua.mp3")) returned 1 [0060.884] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\UZcAFcQa-Q2OoSUA.mp3.sad", nBufferLength=0x105, lpBuffer=0x14d3c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\UZcAFcQa-Q2OoSUA.mp3.sad", lpFilePart=0x0) returned 0x79 [0060.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14d8a0) returned 1 [0060.884] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\UZcAFcQa-Q2OoSUA.mp3.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\-qtxcuxo6pxrrnfjhw72\\8uanyoiyh\\uzcafcqa-q2oosua.mp3.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d810) returned 1 [0060.886] GetCurrentActCtx (in: lphActCtx=0x14daf0 | out: lphActCtx=0x14daf0*=0xa52648) returned 1 [0060.886] PeekMessageW (in: lpMsg=0x14da40, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14da40) returned 0 [0060.887] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.887] AdjustWindowRectEx (in: lpRect=0x14d858, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d858) returned 1 [0060.887] DrawTextExW (in: hdc=0x8010893, lpchText="83 Files\r\nEncrypted", cchText=19, lprc=0x14d7c8, format=0x2400, lpdtp=0x2248930 | out: lpchText="83 Files\r\nEncrypted", lprc=0x14d7c8) returned 26 [0060.887] GetCurrentActCtx (in: lphActCtx=0x14dcb0 | out: lphActCtx=0x14dcb0*=0xa52648) returned 1 [0060.887] PeekMessageW (in: lpMsg=0x14dc00, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc00) returned 0 [0060.887] GetCurrentActCtx (in: lphActCtx=0x14dcb0 | out: lphActCtx=0x14dcb0*=0xa52648) returned 1 [0060.887] PeekMessageW (in: lpMsg=0x14dc00, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc00) returned 0 [0060.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc40) returned 1 [0060.887] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh", nBufferLength=0x105, lpBuffer=0x14d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh", lpFilePart=0x0) returned 0x60 [0060.887] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\", nBufferLength=0x105, lpBuffer=0x14d6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\", lpFilePart=0x0) returned 0x61 [0060.887] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\-qTxcUxO6PxRrNFjHW72\\8UAnYoIyh\\*", lpFindFileData=0x14d8e0 | out: lpFindFileData=0x14d8e0) returned 0xa748e0 [0060.887] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14d930 | out: lpFindFileData=0x14d930) returned 1 [0060.887] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14d930 | out: lpFindFileData=0x14d930) returned 1 [0060.888] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14d930 | out: lpFindFileData=0x14d930) returned 1 [0060.888] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14d930 | out: lpFindFileData=0x14d930) returned 1 [0060.888] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14d930 | out: lpFindFileData=0x14d930) returned 1 [0060.888] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14d930 | out: lpFindFileData=0x14d930) returned 1 [0060.888] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14d930 | out: lpFindFileData=0x14d930) returned 0 [0060.889] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0060.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db90) returned 1 [0060.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db50) returned 1 [0060.889] GetCurrentActCtx (in: lphActCtx=0x14dcb0 | out: lphActCtx=0x14dcb0*=0xa52648) returned 1 [0060.889] PeekMessageW (in: lpMsg=0x14dc00, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc00) returned 0 [0060.889] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0060.889] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0060.889] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0060.889] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0060.889] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0060.889] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0060.889] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0060.889] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0060.889] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0060.889] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0060.889] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14d690, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x61 [0060.889] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14db70) returned 1 [0060.889] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\djacrkh ms\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dae0) returned 1 [0060.890] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0060.891] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0060.891] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dd50) returned 1 [0060.891] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS", nBufferLength=0x105, lpBuffer=0x14d840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS", lpFilePart=0x0) returned 0x4c [0060.891] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\", nBufferLength=0x105, lpBuffer=0x14d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\", lpFilePart=0x0) returned 0x4d [0060.891] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\*", lpFindFileData=0x14d9f0 | out: lpFindFileData=0x14d9f0) returned 0xa748e0 [0060.891] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0060.891] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0060.891] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0060.891] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0060.892] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0060.892] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0060.892] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 0 [0060.892] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0060.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dca0) returned 1 [0060.892] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc60) returned 1 [0060.892] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0060.892] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0060.892] GetCurrentActCtx (in: lphActCtx=0x14dc00 | out: lphActCtx=0x14dc00*=0xa52648) returned 1 [0060.892] PeekMessageW (in: lpMsg=0x14db50, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14db50) returned 0 [0060.892] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\Jr5G_g-x0iFqsh.mp3", nBufferLength=0x105, lpBuffer=0x14d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\Jr5G_g-x0iFqsh.mp3", lpFilePart=0x0) returned 0x5f [0060.892] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14da70) returned 1 [0060.892] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\Jr5G_g-x0iFqsh.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\djacrkh ms\\jr5g_g-x0ifqsh.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.893] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d9e0) returned 1 [0060.893] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14dc08 | out: lpFileSizeHigh=0x14dc08*=0x0) returned 0x15e95 [0060.893] ReadFile (in: hFile=0x270, lpBuffer=0x12393a58, nNumberOfBytesToRead=0x15e95, lpNumberOfBytesRead=0x14db38, lpOverlapped=0x0 | out: lpBuffer=0x12393a58*, lpNumberOfBytesRead=0x14db38*=0x15e95, lpOverlapped=0x0) returned 1 [0060.896] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\Jr5G_g-x0iFqsh.mp3", nBufferLength=0x105, lpBuffer=0x14d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\Jr5G_g-x0iFqsh.mp3", lpFilePart=0x0) returned 0x5f [0060.897] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\Jr5G_g-x0iFqsh.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\djacrkh ms\\jr5g_g-x0ifqsh.mp3")) returned 1 [0060.898] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\Jr5G_g-x0iFqsh.mp3.sad", nBufferLength=0x105, lpBuffer=0x14d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\Jr5G_g-x0iFqsh.mp3.sad", lpFilePart=0x0) returned 0x63 [0060.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14d9b0) returned 1 [0060.898] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\Jr5G_g-x0iFqsh.mp3.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\djacrkh ms\\jr5g_g-x0ifqsh.mp3.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.898] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d920) returned 1 [0060.902] GetCurrentActCtx (in: lphActCtx=0x14dc00 | out: lphActCtx=0x14dc00*=0xa52648) returned 1 [0060.902] PeekMessageW (in: lpMsg=0x14db50, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14db50) returned 0 [0060.902] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.902] AdjustWindowRectEx (in: lpRect=0x14d968, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d968) returned 1 [0060.902] DrawTextExW (in: hdc=0x8010893, lpchText="84 Files\r\nEncrypted", cchText=19, lprc=0x14d8d8, format=0x2400, lpdtp=0x2251f58 | out: lpchText="84 Files\r\nEncrypted", lprc=0x14d8d8) returned 26 [0060.903] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0060.903] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0060.903] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0060.903] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0060.903] GetCurrentActCtx (in: lphActCtx=0x14dc00 | out: lphActCtx=0x14dc00*=0xa52648) returned 1 [0060.903] PeekMessageW (in: lpMsg=0x14db50, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14db50) returned 0 [0060.903] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\QcSTIrkrRDG.m4a", nBufferLength=0x105, lpBuffer=0x14d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\QcSTIrkrRDG.m4a", lpFilePart=0x0) returned 0x5c [0060.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14da70) returned 1 [0060.903] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\QcSTIrkrRDG.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\djacrkh ms\\qcstirkrrdg.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d9e0) returned 1 [0060.903] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14dc08 | out: lpFileSizeHigh=0x14dc08*=0x0) returned 0x93a4 [0060.903] ReadFile (in: hFile=0x270, lpBuffer=0x22523d0, nNumberOfBytesToRead=0x93a4, lpNumberOfBytesRead=0x14db38, lpOverlapped=0x0 | out: lpBuffer=0x22523d0*, lpNumberOfBytesRead=0x14db38*=0x93a4, lpOverlapped=0x0) returned 1 [0060.905] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\QcSTIrkrRDG.m4a", nBufferLength=0x105, lpBuffer=0x14d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\QcSTIrkrRDG.m4a", lpFilePart=0x0) returned 0x5c [0060.905] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\QcSTIrkrRDG.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\djacrkh ms\\qcstirkrrdg.m4a")) returned 1 [0060.906] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\QcSTIrkrRDG.m4a.sad", nBufferLength=0x105, lpBuffer=0x14d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\QcSTIrkrRDG.m4a.sad", lpFilePart=0x0) returned 0x60 [0060.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14d9b0) returned 1 [0060.907] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\QcSTIrkrRDG.m4a.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\djacrkh ms\\qcstirkrrdg.m4a.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d920) returned 1 [0060.909] GetCurrentActCtx (in: lphActCtx=0x14dc00 | out: lphActCtx=0x14dc00*=0xa52648) returned 1 [0060.909] PeekMessageW (in: lpMsg=0x14db50, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14db50) returned 0 [0060.909] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.909] AdjustWindowRectEx (in: lpRect=0x14d968, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d968) returned 1 [0060.909] DrawTextExW (in: hdc=0x8010893, lpchText="85 Files\r\nEncrypted", cchText=19, lprc=0x14d8d8, format=0x2400, lpdtp=0x225e230 | out: lpchText="85 Files\r\nEncrypted", lprc=0x14d8d8) returned 26 [0060.909] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0060.909] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0060.909] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0060.909] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0060.909] GetCurrentActCtx (in: lphActCtx=0x14dc00 | out: lphActCtx=0x14dc00*=0xa52648) returned 1 [0060.909] PeekMessageW (in: lpMsg=0x14db50, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14db50) returned 0 [0060.909] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\RIR1ZzSNULpfxta5s.mp3", nBufferLength=0x105, lpBuffer=0x14d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\RIR1ZzSNULpfxta5s.mp3", lpFilePart=0x0) returned 0x62 [0060.910] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14da70) returned 1 [0060.910] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\RIR1ZzSNULpfxta5s.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\djacrkh ms\\rir1zzsnulpfxta5s.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.910] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d9e0) returned 1 [0060.910] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14dc08 | out: lpFileSizeHigh=0x14dc08*=0x0) returned 0xfd39 [0060.910] ReadFile (in: hFile=0x270, lpBuffer=0x225e6d0, nNumberOfBytesToRead=0xfd39, lpNumberOfBytesRead=0x14db38, lpOverlapped=0x0 | out: lpBuffer=0x225e6d0*, lpNumberOfBytesRead=0x14db38*=0xfd39, lpOverlapped=0x0) returned 1 [0060.912] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\RIR1ZzSNULpfxta5s.mp3", nBufferLength=0x105, lpBuffer=0x14d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\RIR1ZzSNULpfxta5s.mp3", lpFilePart=0x0) returned 0x62 [0060.912] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\RIR1ZzSNULpfxta5s.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\djacrkh ms\\rir1zzsnulpfxta5s.mp3")) returned 1 [0060.914] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\RIR1ZzSNULpfxta5s.mp3.sad", nBufferLength=0x105, lpBuffer=0x14d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\RIR1ZzSNULpfxta5s.mp3.sad", lpFilePart=0x0) returned 0x66 [0060.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14d9b0) returned 1 [0060.914] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\RIR1ZzSNULpfxta5s.mp3.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\djacrkh ms\\rir1zzsnulpfxta5s.mp3.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d920) returned 1 [0060.917] GetCurrentActCtx (in: lphActCtx=0x14dc00 | out: lphActCtx=0x14dc00*=0xa52648) returned 1 [0060.917] PeekMessageW (in: lpMsg=0x14db50, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14db50) returned 0 [0060.917] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.917] AdjustWindowRectEx (in: lpRect=0x14d968, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d968) returned 1 [0060.917] DrawTextExW (in: hdc=0x8010893, lpchText="86 Files\r\nEncrypted", cchText=19, lprc=0x14d8d8, format=0x2400, lpdtp=0x2270ef0 | out: lpchText="86 Files\r\nEncrypted", lprc=0x14d8d8) returned 26 [0060.918] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0060.918] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0060.918] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0060.918] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0060.918] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0060.918] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0060.918] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0060.918] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0060.918] GetCurrentActCtx (in: lphActCtx=0x14dc00 | out: lphActCtx=0x14dc00*=0xa52648) returned 1 [0060.918] PeekMessageW (in: lpMsg=0x14db50, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14db50) returned 0 [0060.918] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\_PC3WDAOM1.wav", nBufferLength=0x105, lpBuffer=0x14d590, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\_PC3WDAOM1.wav", lpFilePart=0x0) returned 0x5b [0060.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14da70) returned 1 [0060.918] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\_PC3WDAOM1.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\djacrkh ms\\_pc3wdaom1.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d9e0) returned 1 [0060.918] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14dc08 | out: lpFileSizeHigh=0x14dc08*=0x0) returned 0xa142 [0060.918] ReadFile (in: hFile=0x270, lpBuffer=0x2271568, nNumberOfBytesToRead=0xa142, lpNumberOfBytesRead=0x14db38, lpOverlapped=0x0 | out: lpBuffer=0x2271568*, lpNumberOfBytesRead=0x14db38*=0xa142, lpOverlapped=0x0) returned 1 [0060.920] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\_PC3WDAOM1.wav", nBufferLength=0x105, lpBuffer=0x14d730, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\_PC3WDAOM1.wav", lpFilePart=0x0) returned 0x5b [0060.920] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\_PC3WDAOM1.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\djacrkh ms\\_pc3wdaom1.wav")) returned 1 [0060.922] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\_PC3WDAOM1.wav.sad", nBufferLength=0x105, lpBuffer=0x14d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\_PC3WDAOM1.wav.sad", lpFilePart=0x0) returned 0x5f [0060.922] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14d9b0) returned 1 [0060.922] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\_PC3WDAOM1.wav.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\-hztwd\\hdh4sk0a1zsp6dtg\\azhgr\\djacrkh ms\\_pc3wdaom1.wav.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.922] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d920) returned 1 [0060.924] GetCurrentActCtx (in: lphActCtx=0x14dc00 | out: lphActCtx=0x14dc00*=0xa52648) returned 1 [0060.924] PeekMessageW (in: lpMsg=0x14db50, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14db50) returned 0 [0060.924] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.924] AdjustWindowRectEx (in: lpRect=0x14d968, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d968) returned 1 [0060.924] DrawTextExW (in: hdc=0x8010893, lpchText="87 Files\r\nEncrypted", cchText=19, lprc=0x14d8d8, format=0x2400, lpdtp=0x227e150 | out: lpchText="87 Files\r\nEncrypted", lprc=0x14d8d8) returned 26 [0060.925] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0060.925] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0060.925] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0060.925] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0060.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dd50) returned 1 [0060.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS", nBufferLength=0x105, lpBuffer=0x14d840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS", lpFilePart=0x0) returned 0x4c [0060.925] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\", nBufferLength=0x105, lpBuffer=0x14d7e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\", lpFilePart=0x0) returned 0x4d [0060.925] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\-hZTWD\\hDh4sk0a1Zsp6Dtg\\AZhgr\\DJAcRKh MS\\*", lpFindFileData=0x14d9f0 | out: lpFindFileData=0x14d9f0) returned 0xa748e0 [0060.925] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0060.925] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0060.925] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0060.926] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0060.926] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0060.926] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 1 [0060.926] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14da40 | out: lpFindFileData=0x14da40) returned 0 [0060.926] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0060.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dca0) returned 1 [0060.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc60) returned 1 [0060.926] GetCurrentActCtx (in: lphActCtx=0x14ddc0 | out: lphActCtx=0x14ddc0*=0xa52648) returned 1 [0060.926] PeekMessageW (in: lpMsg=0x14dd10, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd10) returned 0 [0060.927] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0060.927] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0060.927] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0060.927] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0060.927] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0060.927] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0060.927] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0060.927] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0060.927] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.927] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.927] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.927] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.927] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0060.927] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0060.927] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0060.927] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0060.927] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.927] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.927] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14d9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x4b [0060.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dea0) returned 1 [0060.927] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\tzokmdsmz60xmovdna\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de10) returned 1 [0060.928] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.928] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e080) returned 1 [0060.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA", lpFilePart=0x0) returned 0x36 [0060.928] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\", nBufferLength=0x105, lpBuffer=0x14db10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\", lpFilePart=0x0) returned 0x37 [0060.928] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\*", lpFindFileData=0x14dd20 | out: lpFindFileData=0x14dd20) returned 0xa748e0 [0060.928] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.929] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.929] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.929] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.929] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.929] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.929] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0060.929] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 0 [0060.929] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0060.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dfd0) returned 1 [0060.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14df90) returned 1 [0060.930] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.930] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.930] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0060.930] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0060.930] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\aO4a qiIg0.m4a", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\aO4a qiIg0.m4a", lpFilePart=0x0) returned 0x45 [0060.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0060.930] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\aO4a qiIg0.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\tzokmdsmz60xmovdna\\ao4a qiig0.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0060.930] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x1c6c [0060.930] ReadFile (in: hFile=0x270, lpBuffer=0x22849c0, nNumberOfBytesToRead=0x1c6c, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x22849c0*, lpNumberOfBytesRead=0x14de68*=0x1c6c, lpOverlapped=0x0) returned 1 [0060.931] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\aO4a qiIg0.m4a", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\aO4a qiIg0.m4a", lpFilePart=0x0) returned 0x45 [0060.931] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\aO4a qiIg0.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\tzokmdsmz60xmovdna\\ao4a qiig0.m4a")) returned 1 [0060.932] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\aO4a qiIg0.m4a.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\aO4a qiIg0.m4a.sad", lpFilePart=0x0) returned 0x49 [0060.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0060.932] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\aO4a qiIg0.m4a.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\tzokmdsmz60xmovdna\\ao4a qiig0.m4a.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0060.934] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0060.934] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0060.934] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.934] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0060.934] DrawTextExW (in: hdc=0x8010893, lpchText="88 Files\r\nEncrypted", cchText=19, lprc=0x14dc08, format=0x2400, lpdtp=0x228dc48 | out: lpchText="88 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0060.935] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.935] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.935] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.935] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.935] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0060.935] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0060.935] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\JoEA3Y_M--f.m4a", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\JoEA3Y_M--f.m4a", lpFilePart=0x0) returned 0x46 [0060.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0060.935] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\JoEA3Y_M--f.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\tzokmdsmz60xmovdna\\joea3y_m--f.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0060.935] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0xff12 [0060.935] ReadFile (in: hFile=0x270, lpBuffer=0x228e090, nNumberOfBytesToRead=0xff12, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x228e090*, lpNumberOfBytesRead=0x14de68*=0xff12, lpOverlapped=0x0) returned 1 [0060.955] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\JoEA3Y_M--f.m4a", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\JoEA3Y_M--f.m4a", lpFilePart=0x0) returned 0x46 [0060.955] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\JoEA3Y_M--f.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\tzokmdsmz60xmovdna\\joea3y_m--f.m4a")) returned 1 [0060.957] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\JoEA3Y_M--f.m4a.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\JoEA3Y_M--f.m4a.sad", lpFilePart=0x0) returned 0x4a [0060.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0060.957] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\JoEA3Y_M--f.m4a.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\tzokmdsmz60xmovdna\\joea3y_m--f.m4a.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.957] GetFileType (hFile=0x270) returned 0x1 [0060.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0060.957] GetFileType (hFile=0x270) returned 0x1 [0060.957] WriteFile (in: hFile=0x270, lpBuffer=0x2143468*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2143468*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.959] WriteFile (in: hFile=0x270, lpBuffer=0x2143468*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2143468*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.959] WriteFile (in: hFile=0x270, lpBuffer=0x2143468*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2143468*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.959] WriteFile (in: hFile=0x270, lpBuffer=0x2143468*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2143468*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.960] WriteFile (in: hFile=0x270, lpBuffer=0x2143468*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2143468*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.960] WriteFile (in: hFile=0x270, lpBuffer=0x2143468*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2143468*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.960] WriteFile (in: hFile=0x270, lpBuffer=0x2143468*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2143468*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.961] WriteFile (in: hFile=0x270, lpBuffer=0x2143468*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2143468*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.961] WriteFile (in: hFile=0x270, lpBuffer=0x2143468*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2143468*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.961] WriteFile (in: hFile=0x270, lpBuffer=0x2143468*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2143468*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.962] WriteFile (in: hFile=0x270, lpBuffer=0x2143468*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2143468*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.962] WriteFile (in: hFile=0x270, lpBuffer=0x2143468*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2143468*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.962] WriteFile (in: hFile=0x270, lpBuffer=0x2143468*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2143468*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.963] WriteFile (in: hFile=0x270, lpBuffer=0x2143468*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2143468*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.963] WriteFile (in: hFile=0x270, lpBuffer=0x2143468*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2143468*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.963] WriteFile (in: hFile=0x270, lpBuffer=0x2143468*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2143468*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.964] WriteFile (in: hFile=0x270, lpBuffer=0x2143468*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2143468*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.964] WriteFile (in: hFile=0x270, lpBuffer=0x2143468*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2143468*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.964] WriteFile (in: hFile=0x270, lpBuffer=0x2143468*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2143468*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.965] WriteFile (in: hFile=0x270, lpBuffer=0x2143468*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2143468*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.965] WriteFile (in: hFile=0x270, lpBuffer=0x2143468*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2143468*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.965] WriteFile (in: hFile=0x270, lpBuffer=0x2143468*, nNumberOfBytesToWrite=0x418, lpNumberOfBytesWritten=0x14dd28, lpOverlapped=0x0 | out: lpBuffer=0x2143468*, lpNumberOfBytesWritten=0x14dd28*=0x418, lpOverlapped=0x0) returned 1 [0060.965] CloseHandle (hObject=0x270) returned 1 [0060.967] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0060.967] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0060.967] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.967] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0060.967] DrawTextExW (in: hdc=0x8010893, lpchText="89 Files\r\nEncrypted", cchText=19, lprc=0x14dc08, format=0x2400, lpdtp=0x2144660 | out: lpchText="89 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0060.968] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.968] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.968] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.968] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.968] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0060.968] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0060.968] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\m uGSSV-.m4a", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\m uGSSV-.m4a", lpFilePart=0x0) returned 0x43 [0060.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0060.968] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\m uGSSV-.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\tzokmdsmz60xmovdna\\m ugssv-.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.968] GetFileType (hFile=0x270) returned 0x1 [0060.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0060.968] GetFileType (hFile=0x270) returned 0x1 [0060.968] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x5421 [0060.968] ReadFile (in: hFile=0x270, lpBuffer=0x2144aa0, nNumberOfBytesToRead=0x5421, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x2144aa0*, lpNumberOfBytesRead=0x14de68*=0x5421, lpOverlapped=0x0) returned 1 [0060.969] CloseHandle (hObject=0x270) returned 1 [0060.969] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\m uGSSV-.m4a", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\m uGSSV-.m4a", lpFilePart=0x0) returned 0x43 [0060.969] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\m uGSSV-.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\tzokmdsmz60xmovdna\\m ugssv-.m4a")) returned 1 [0060.971] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\m uGSSV-.m4a.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\m uGSSV-.m4a.sad", lpFilePart=0x0) returned 0x47 [0060.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0060.971] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\m uGSSV-.m4a.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\tzokmdsmz60xmovdna\\m ugssv-.m4a.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.971] GetFileType (hFile=0x270) returned 0x1 [0060.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0060.971] GetFileType (hFile=0x270) returned 0x1 [0060.971] WriteFile (in: hFile=0x270, lpBuffer=0x2159758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2159758*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.972] WriteFile (in: hFile=0x270, lpBuffer=0x2159758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2159758*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.973] WriteFile (in: hFile=0x270, lpBuffer=0x2159758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2159758*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.973] WriteFile (in: hFile=0x270, lpBuffer=0x2159758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2159758*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.973] WriteFile (in: hFile=0x270, lpBuffer=0x2159758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2159758*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.974] WriteFile (in: hFile=0x270, lpBuffer=0x2159758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2159758*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.974] WriteFile (in: hFile=0x270, lpBuffer=0x2159758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dd48, lpOverlapped=0x0 | out: lpBuffer=0x2159758*, lpNumberOfBytesWritten=0x14dd48*=0x1000, lpOverlapped=0x0) returned 1 [0060.974] WriteFile (in: hFile=0x270, lpBuffer=0x2159758*, nNumberOfBytesToWrite=0x2c, lpNumberOfBytesWritten=0x14dd28, lpOverlapped=0x0 | out: lpBuffer=0x2159758*, lpNumberOfBytesWritten=0x14dd28*=0x2c, lpOverlapped=0x0) returned 1 [0060.974] CloseHandle (hObject=0x270) returned 1 [0060.975] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0060.975] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0060.976] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.976] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0060.976] DrawTextExW (in: hdc=0x8010893, lpchText="90 Files\r\nEncrypted", cchText=19, lprc=0x14dc08, format=0x2400, lpdtp=0x215a950 | out: lpchText="90 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0060.976] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.976] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.976] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.976] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.976] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.976] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.976] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.976] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.976] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0060.976] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0060.976] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\zEcsmk8cKFvtB8k.m4a", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\zEcsmk8cKFvtB8k.m4a", lpFilePart=0x0) returned 0x4a [0060.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0060.976] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\zEcsmk8cKFvtB8k.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\tzokmdsmz60xmovdna\\zecsmk8ckfvtb8k.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.977] GetFileType (hFile=0x270) returned 0x1 [0060.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0060.977] GetFileType (hFile=0x270) returned 0x1 [0060.977] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x11457 [0060.977] ReadFile (in: hFile=0x270, lpBuffer=0x215afb8, nNumberOfBytesToRead=0x11457, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x215afb8*, lpNumberOfBytesRead=0x14de68*=0x11457, lpOverlapped=0x0) returned 1 [0060.978] CloseHandle (hObject=0x270) returned 1 [0060.981] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\zEcsmk8cKFvtB8k.m4a", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\zEcsmk8cKFvtB8k.m4a", lpFilePart=0x0) returned 0x4a [0060.981] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\zEcsmk8cKFvtB8k.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\tzokmdsmz60xmovdna\\zecsmk8ckfvtb8k.m4a")) returned 1 [0060.982] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\zEcsmk8cKFvtB8k.m4a.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\zEcsmk8cKFvtB8k.m4a.sad", lpFilePart=0x0) returned 0x4e [0060.982] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0060.982] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\zEcsmk8cKFvtB8k.m4a.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\tzokmdsmz60xmovdna\\zecsmk8ckfvtb8k.m4a.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.983] GetFileType (hFile=0x270) returned 0x1 [0060.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0060.983] GetFileType (hFile=0x270) returned 0x1 [0060.983] WriteFile (in: hFile=0x270, lpBuffer=0x216dc60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216dc60*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.984] WriteFile (in: hFile=0x270, lpBuffer=0x216dc60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216dc60*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.985] WriteFile (in: hFile=0x270, lpBuffer=0x216dc60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216dc60*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.985] WriteFile (in: hFile=0x270, lpBuffer=0x216dc60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216dc60*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.985] WriteFile (in: hFile=0x270, lpBuffer=0x216dc60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216dc60*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.986] WriteFile (in: hFile=0x270, lpBuffer=0x216dc60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216dc60*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.986] WriteFile (in: hFile=0x270, lpBuffer=0x216dc60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216dc60*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.986] WriteFile (in: hFile=0x270, lpBuffer=0x216dc60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216dc60*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.987] WriteFile (in: hFile=0x270, lpBuffer=0x216dc60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216dc60*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.987] WriteFile (in: hFile=0x270, lpBuffer=0x216dc60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216dc60*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.987] WriteFile (in: hFile=0x270, lpBuffer=0x216dc60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216dc60*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.988] WriteFile (in: hFile=0x270, lpBuffer=0x216dc60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216dc60*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.988] WriteFile (in: hFile=0x270, lpBuffer=0x216dc60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216dc60*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.988] WriteFile (in: hFile=0x270, lpBuffer=0x216dc60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216dc60*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.989] WriteFile (in: hFile=0x270, lpBuffer=0x216dc60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216dc60*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.989] WriteFile (in: hFile=0x270, lpBuffer=0x216dc60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216dc60*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.989] WriteFile (in: hFile=0x270, lpBuffer=0x216dc60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216dc60*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.990] WriteFile (in: hFile=0x270, lpBuffer=0x216dc60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216dc60*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.990] WriteFile (in: hFile=0x270, lpBuffer=0x216dc60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216dc60*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.990] WriteFile (in: hFile=0x270, lpBuffer=0x216dc60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216dc60*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.991] WriteFile (in: hFile=0x270, lpBuffer=0x216dc60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216dc60*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.991] WriteFile (in: hFile=0x270, lpBuffer=0x216dc60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216dc60*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.991] WriteFile (in: hFile=0x270, lpBuffer=0x216dc60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dd48, lpOverlapped=0x0 | out: lpBuffer=0x216dc60*, lpNumberOfBytesWritten=0x14dd48*=0x1000, lpOverlapped=0x0) returned 1 [0060.991] WriteFile (in: hFile=0x270, lpBuffer=0x216dc60*, nNumberOfBytesToWrite=0x74, lpNumberOfBytesWritten=0x14dd28, lpOverlapped=0x0 | out: lpBuffer=0x216dc60*, lpNumberOfBytesWritten=0x14dd28*=0x74, lpOverlapped=0x0) returned 1 [0060.992] CloseHandle (hObject=0x270) returned 1 [0060.993] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0060.993] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0060.994] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0060.994] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0060.994] DrawTextExW (in: hdc=0x8010893, lpchText="91 Files\r\nEncrypted", cchText=19, lprc=0x14dc08, format=0x2400, lpdtp=0x216ee58 | out: lpchText="91 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0060.994] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.994] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.994] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0060.994] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0060.994] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0060.994] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0060.994] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\Zvg4gk5e-WOdRK_MoHIN.m4a", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\Zvg4gk5e-WOdRK_MoHIN.m4a", lpFilePart=0x0) returned 0x4f [0060.994] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0060.994] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\Zvg4gk5e-WOdRK_MoHIN.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\tzokmdsmz60xmovdna\\zvg4gk5e-wodrk_mohin.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0060.994] GetFileType (hFile=0x270) returned 0x1 [0060.994] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0060.994] GetFileType (hFile=0x270) returned 0x1 [0060.995] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x6965 [0060.995] ReadFile (in: hFile=0x270, lpBuffer=0x216f2e0, nNumberOfBytesToRead=0x6965, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x216f2e0*, lpNumberOfBytesRead=0x14de68*=0x6965, lpOverlapped=0x0) returned 1 [0060.996] CloseHandle (hObject=0x270) returned 1 [0060.996] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\Zvg4gk5e-WOdRK_MoHIN.m4a", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\Zvg4gk5e-WOdRK_MoHIN.m4a", lpFilePart=0x0) returned 0x4f [0060.996] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\Zvg4gk5e-WOdRK_MoHIN.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\tzokmdsmz60xmovdna\\zvg4gk5e-wodrk_mohin.m4a")) returned 1 [0060.997] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\Zvg4gk5e-WOdRK_MoHIN.m4a.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\Zvg4gk5e-WOdRK_MoHIN.m4a.sad", lpFilePart=0x0) returned 0x53 [0060.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0060.998] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\Zvg4gk5e-WOdRK_MoHIN.m4a.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\tzokmdsmz60xmovdna\\zvg4gk5e-wodrk_mohin.m4a.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0060.998] GetFileType (hFile=0x270) returned 0x1 [0060.998] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0060.998] GetFileType (hFile=0x270) returned 0x1 [0060.998] WriteFile (in: hFile=0x270, lpBuffer=0x2188df0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2188df0*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0060.999] WriteFile (in: hFile=0x270, lpBuffer=0x2188df0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2188df0*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0061.000] WriteFile (in: hFile=0x270, lpBuffer=0x2188df0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2188df0*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0061.000] WriteFile (in: hFile=0x270, lpBuffer=0x2188df0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2188df0*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0061.000] WriteFile (in: hFile=0x270, lpBuffer=0x2188df0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2188df0*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0061.001] WriteFile (in: hFile=0x270, lpBuffer=0x2188df0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2188df0*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0061.001] WriteFile (in: hFile=0x270, lpBuffer=0x2188df0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2188df0*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0061.001] WriteFile (in: hFile=0x270, lpBuffer=0x2188df0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2188df0*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0061.002] WriteFile (in: hFile=0x270, lpBuffer=0x2188df0*, nNumberOfBytesToWrite=0xc88, lpNumberOfBytesWritten=0x14dd28, lpOverlapped=0x0 | out: lpBuffer=0x2188df0*, lpNumberOfBytesWritten=0x14dd28*=0xc88, lpOverlapped=0x0) returned 1 [0061.002] CloseHandle (hObject=0x270) returned 1 [0061.003] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0061.003] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0061.003] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.003] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0061.003] DrawTextExW (in: hdc=0x8010893, lpchText="92 Files\r\nEncrypted", cchText=19, lprc=0x14dc08, format=0x2400, lpdtp=0x2189fe8 | out: lpchText="92 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0061.004] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.004] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.004] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.004] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e080) returned 1 [0061.004] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA", lpFilePart=0x0) returned 0x36 [0061.004] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\", nBufferLength=0x105, lpBuffer=0x14db10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\", lpFilePart=0x0) returned 0x37 [0061.004] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tzoKMDsMZ60xMOVdNA\\*", lpFindFileData=0x14dd20 | out: lpFindFileData=0x14dd20) returned 0xa748e0 [0061.004] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.004] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.004] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.005] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.005] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.005] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.005] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.005] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 0 [0061.005] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0061.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dfd0) returned 1 [0061.005] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14df90) returned 1 [0061.005] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.006] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.006] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.006] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.006] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.006] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.006] GetCurrentActCtx (in: lphActCtx=0x14e310 | out: lphActCtx=0x14e310*=0xa52648) returned 1 [0061.006] PeekMessageW (in: lpMsg=0x14e260, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e260) returned 0 [0061.006] GetWindowTextLengthW (hWnd=0x3019e) returned 35 [0061.006] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0061.006] GetSystemMetrics (nIndex=42) returned 0 [0061.006] GetWindowTextW (in: hWnd=0x3019e, lpString=0x14e1c0, nMaxCount=36 | out: lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music") returned 35 [0061.006] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xd, wParam=0x24, lParam=0x14e1c0) returned 0x23 [0061.006] GetWindowTextLengthW (hWnd=0x3019e) returned 35 [0061.006] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x23 [0061.006] GetSystemMetrics (nIndex=42) returned 0 [0061.006] GetWindowTextW (in: hWnd=0x3019e, lpString=0x14e160, nMaxCount=36 | out: lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music") returned 35 [0061.006] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xd, wParam=0x24, lParam=0x14e160) returned 0x23 [0061.006] SetWindowTextW (hWnd=0x3019e, lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures") returned 1 [0061.007] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xc, wParam=0x0, lParam=0x2124b6c) returned 0x1 [0061.007] GetStockObject (i=5) returned 0x1900015 [0061.007] GetDlgItem (hDlg=0x301d2, nIDDlgItem=197022) returned 0x3019e [0061.007] SendMessageW (hWnd=0x3019e, Msg=0x202b, wParam=0x3019e, lParam=0x14da50) returned 0x0 [0061.007] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x202b, wParam=0x3019e, lParam=0x14da50) returned 0x0 [0061.007] GetWindowTextLengthW (hWnd=0x3019e) returned 38 [0061.007] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x26 [0061.007] GetSystemMetrics (nIndex=42) returned 0 [0061.007] GetWindowTextW (in: hWnd=0x3019e, lpString=0x14e010, nMaxCount=39 | out: lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures") returned 38 [0061.007] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xd, wParam=0x27, lParam=0x14e010) returned 0x26 [0061.007] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.007] AdjustWindowRectEx (in: lpRect=0x14e078, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e078) returned 1 [0061.007] DrawTextExW (in: hdc=0x8010893, lpchText="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", cchText=38, lprc=0x14dfe8, format=0x102400, lpdtp=0x218c160 | out: lpchText="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lprc=0x14dfe8) returned 13 [0061.008] SetWindowPos (hWnd=0x3019e, hWndInsertAfter=0x0, X=12, Y=101, cx=215, cy=13, uFlags=0x16) returned 1 [0061.008] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x46, wParam=0x0, lParam=0x14e020) returned 0x0 [0061.008] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x83, wParam=0x1, lParam=0x14dff0) returned 0x0 [0061.008] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x47, wParam=0x0, lParam=0x14e020) returned 0x0 [0061.008] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x5, wParam=0x0, lParam=0xd00d7) returned 0x0 [0061.008] GetClientRect (in: hWnd=0x3019e, lpRect=0x14da50 | out: lpRect=0x14da50) returned 1 [0061.008] GetWindowRect (in: hWnd=0x3019e, lpRect=0x14da50 | out: lpRect=0x14da50) returned 1 [0061.008] GetParent (hWnd=0x3019e) returned 0x301d2 [0061.008] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301d2, lpPoints=0x14da50, cPoints=0x2 | out: lpPoints=0x14da50) returned 2097184000 [0061.008] InvalidateRect (hWnd=0x3019e, lpRect=0x0, bErase=1) returned 1 [0061.009] GetWindowTextLengthW (hWnd=0x3019e) returned 38 [0061.009] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x26 [0061.009] GetSystemMetrics (nIndex=42) returned 0 [0061.009] GetWindowTextW (in: hWnd=0x3019e, lpString=0x14d680, nMaxCount=39 | out: lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures") returned 38 [0061.009] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xd, wParam=0x27, lParam=0x14d680) returned 0x26 [0061.009] GetParent (hWnd=0x3019e) returned 0x301d2 [0061.009] InvalidateRect (hWnd=0x3019e, lpRect=0x0, bErase=1) returned 1 [0061.009] GetWindowTextLengthW (hWnd=0x301d2) returned 12 [0061.009] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0061.009] GetSystemMetrics (nIndex=42) returned 0 [0061.009] GetWindowTextW (in: hWnd=0x301d2, lpString=0x14dfd0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0061.009] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0xd, wParam=0xd, lParam=0x14dfd0) returned 0xc [0061.009] GetCurrentActCtx (in: lphActCtx=0x14e310 | out: lphActCtx=0x14e310*=0xa52648) returned 1 [0061.009] PeekMessageW (in: lpMsg=0x14e260, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e260) returned 0 [0061.009] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.009] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.009] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x3b [0061.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dfb0) returned 1 [0061.009] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.010] GetFileType (hFile=0x270) returned 0x1 [0061.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14df20) returned 1 [0061.011] GetFileType (hFile=0x270) returned 0x1 [0061.011] WriteFile (in: hFile=0x270, lpBuffer=0x218dd50*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x14dff8, lpOverlapped=0x0 | out: lpBuffer=0x218dd50*, lpNumberOfBytesWritten=0x14dff8*=0x119, lpOverlapped=0x0) returned 1 [0061.012] CloseHandle (hObject=0x270) returned 1 [0061.012] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.012] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e190) returned 1 [0061.012] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x14dc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0061.012] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\", nBufferLength=0x105, lpBuffer=0x14dc20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\", lpFilePart=0x0) returned 0x27 [0061.012] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", lpFindFileData=0x14de30 | out: lpFindFileData=0x14de30) returned 0xa748e0 [0061.012] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.013] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.013] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.013] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.013] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.013] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.013] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.013] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.014] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.014] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.014] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 0 [0061.014] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0061.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e0e0) returned 1 [0061.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e0a0) returned 1 [0061.014] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.014] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.014] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0061.014] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0061.014] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\CCTKJXvpdZMwFLYipvXx.gif", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\CCTKJXvpdZMwFLYipvXx.gif", lpFilePart=0x0) returned 0x3f [0061.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0061.014] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\CCTKJXvpdZMwFLYipvXx.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\cctkjxvpdzmwflyipvxx.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.015] GetFileType (hFile=0x270) returned 0x1 [0061.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0061.015] GetFileType (hFile=0x270) returned 0x1 [0061.015] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0xa7ec [0061.015] ReadFile (in: hFile=0x270, lpBuffer=0x2190e28, nNumberOfBytesToRead=0xa7ec, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x2190e28*, lpNumberOfBytesRead=0x14df78*=0xa7ec, lpOverlapped=0x0) returned 1 [0061.016] CloseHandle (hObject=0x270) returned 1 [0061.018] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\CCTKJXvpdZMwFLYipvXx.gif", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\CCTKJXvpdZMwFLYipvXx.gif", lpFilePart=0x0) returned 0x3f [0061.018] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\CCTKJXvpdZMwFLYipvXx.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\cctkjxvpdzmwflyipvxx.gif")) returned 1 [0061.019] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\CCTKJXvpdZMwFLYipvXx.gif.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\CCTKJXvpdZMwFLYipvXx.gif.sad", lpFilePart=0x0) returned 0x43 [0061.019] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0061.020] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\CCTKJXvpdZMwFLYipvXx.gif.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\cctkjxvpdzmwflyipvxx.gif.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.020] GetFileType (hFile=0x270) returned 0x1 [0061.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0061.020] GetFileType (hFile=0x270) returned 0x1 [0061.020] WriteFile (in: hFile=0x270, lpBuffer=0x219ce30*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219ce30*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.021] WriteFile (in: hFile=0x270, lpBuffer=0x219ce30*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219ce30*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.022] WriteFile (in: hFile=0x270, lpBuffer=0x219ce30*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219ce30*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.022] WriteFile (in: hFile=0x270, lpBuffer=0x219ce30*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219ce30*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.022] WriteFile (in: hFile=0x270, lpBuffer=0x219ce30*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219ce30*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.023] WriteFile (in: hFile=0x270, lpBuffer=0x219ce30*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219ce30*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.023] WriteFile (in: hFile=0x270, lpBuffer=0x219ce30*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219ce30*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.023] WriteFile (in: hFile=0x270, lpBuffer=0x219ce30*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219ce30*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.024] WriteFile (in: hFile=0x270, lpBuffer=0x219ce30*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219ce30*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.024] WriteFile (in: hFile=0x270, lpBuffer=0x219ce30*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219ce30*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.024] WriteFile (in: hFile=0x270, lpBuffer=0x219ce30*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219ce30*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.025] WriteFile (in: hFile=0x270, lpBuffer=0x219ce30*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219ce30*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.025] WriteFile (in: hFile=0x270, lpBuffer=0x219ce30*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219ce30*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.025] WriteFile (in: hFile=0x270, lpBuffer=0x219ce30*, nNumberOfBytesToWrite=0xfe8, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x219ce30*, lpNumberOfBytesWritten=0x14de38*=0xfe8, lpOverlapped=0x0) returned 1 [0061.025] CloseHandle (hObject=0x270) returned 1 [0061.027] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0061.027] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0061.027] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.027] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0061.027] DrawTextExW (in: hdc=0x8010893, lpchText="93 Files\r\nEncrypted", cchText=19, lprc=0x14dd18, format=0x2400, lpdtp=0x219e028 | out: lpchText="93 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0061.028] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.028] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.028] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.028] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.028] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0061.028] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0061.028] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini", lpFilePart=0x0) returned 0x32 [0061.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0061.028] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.028] GetFileType (hFile=0x270) returned 0x1 [0061.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0061.028] GetFileType (hFile=0x270) returned 0x1 [0061.028] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x1f8 [0061.028] ReadFile (in: hFile=0x270, lpBuffer=0x219e648, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x219e648*, lpNumberOfBytesRead=0x14df78*=0x1f8, lpOverlapped=0x0) returned 1 [0061.029] CloseHandle (hObject=0x270) returned 1 [0061.029] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini", lpFilePart=0x0) returned 0x32 [0061.029] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\desktop.ini")) returned 1 [0061.030] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini.sad", lpFilePart=0x0) returned 0x36 [0061.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0061.030] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\desktop.ini.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.031] GetFileType (hFile=0x270) returned 0x1 [0061.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0061.031] GetFileType (hFile=0x270) returned 0x1 [0061.031] WriteFile (in: hFile=0x270, lpBuffer=0x21a1358*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x21a1358*, lpNumberOfBytesWritten=0x14de38*=0x2a0, lpOverlapped=0x0) returned 1 [0061.032] CloseHandle (hObject=0x270) returned 1 [0061.033] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0061.033] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0061.033] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.033] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0061.033] DrawTextExW (in: hdc=0x8010893, lpchText="94 Files\r\nEncrypted", cchText=19, lprc=0x14dd18, format=0x2400, lpdtp=0x21a2550 | out: lpchText="94 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0061.033] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.033] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.034] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.034] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.034] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0061.034] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0061.034] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\h1kJV42AvJsf1z8XGAJ.png", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\h1kJV42AvJsf1z8XGAJ.png", lpFilePart=0x0) returned 0x3e [0061.034] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0061.034] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\h1kJV42AvJsf1z8XGAJ.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\h1kjv42avjsf1z8xgaj.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.034] GetFileType (hFile=0x270) returned 0x1 [0061.034] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0061.034] GetFileType (hFile=0x270) returned 0x1 [0061.034] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x4bb1 [0061.034] ReadFile (in: hFile=0x270, lpBuffer=0x21a29a8, nNumberOfBytesToRead=0x4bb1, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x21a29a8*, lpNumberOfBytesRead=0x14df78*=0x4bb1, lpOverlapped=0x0) returned 1 [0061.035] CloseHandle (hObject=0x270) returned 1 [0061.035] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\h1kJV42AvJsf1z8XGAJ.png", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\h1kJV42AvJsf1z8XGAJ.png", lpFilePart=0x0) returned 0x3e [0061.036] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\h1kJV42AvJsf1z8XGAJ.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\h1kjv42avjsf1z8xgaj.png")) returned 1 [0061.037] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\h1kJV42AvJsf1z8XGAJ.png.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\h1kJV42AvJsf1z8XGAJ.png.sad", lpFilePart=0x0) returned 0x42 [0061.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0061.037] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\h1kJV42AvJsf1z8XGAJ.png.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\h1kjv42avjsf1z8xgaj.png.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.038] GetFileType (hFile=0x270) returned 0x1 [0061.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0061.038] GetFileType (hFile=0x270) returned 0x1 [0061.038] WriteFile (in: hFile=0x270, lpBuffer=0x21b5768*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b5768*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.039] WriteFile (in: hFile=0x270, lpBuffer=0x21b5768*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b5768*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.040] WriteFile (in: hFile=0x270, lpBuffer=0x21b5768*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b5768*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.040] WriteFile (in: hFile=0x270, lpBuffer=0x21b5768*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b5768*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.040] WriteFile (in: hFile=0x270, lpBuffer=0x21b5768*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b5768*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.041] WriteFile (in: hFile=0x270, lpBuffer=0x21b5768*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b5768*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.041] WriteFile (in: hFile=0x270, lpBuffer=0x21b5768*, nNumberOfBytesToWrite=0x4ec, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x21b5768*, lpNumberOfBytesWritten=0x14de38*=0x4ec, lpOverlapped=0x0) returned 1 [0061.041] CloseHandle (hObject=0x270) returned 1 [0061.045] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0061.045] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0061.045] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.045] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0061.045] DrawTextExW (in: hdc=0x8010893, lpchText="95 Files\r\nEncrypted", cchText=19, lprc=0x14dd18, format=0x2400, lpdtp=0x21b6960 | out: lpchText="95 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0061.045] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.045] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.045] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.045] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.046] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0061.046] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0061.046] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\oZXUtWCsvM7V53d7o-.bmp", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\oZXUtWCsvM7V53d7o-.bmp", lpFilePart=0x0) returned 0x3d [0061.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0061.046] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\oZXUtWCsvM7V53d7o-.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ozxutwcsvm7v53d7o-.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.046] GetFileType (hFile=0x270) returned 0x1 [0061.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0061.046] GetFileType (hFile=0x270) returned 0x1 [0061.046] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x18ac4 [0061.046] ReadFile (in: hFile=0x270, lpBuffer=0x121b6310, nNumberOfBytesToRead=0x18ac4, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x121b6310*, lpNumberOfBytesRead=0x14df78*=0x18ac4, lpOverlapped=0x0) returned 1 [0061.048] CloseHandle (hObject=0x270) returned 1 [0061.052] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\oZXUtWCsvM7V53d7o-.bmp", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\oZXUtWCsvM7V53d7o-.bmp", lpFilePart=0x0) returned 0x3d [0061.052] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\oZXUtWCsvM7V53d7o-.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ozxutwcsvm7v53d7o-.bmp")) returned 1 [0061.054] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\oZXUtWCsvM7V53d7o-.bmp.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\oZXUtWCsvM7V53d7o-.bmp.sad", lpFilePart=0x0) returned 0x41 [0061.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0061.054] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\oZXUtWCsvM7V53d7o-.bmp.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ozxutwcsvm7v53d7o-.bmp.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.054] GetFileType (hFile=0x270) returned 0x1 [0061.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0061.054] GetFileType (hFile=0x270) returned 0x1 [0061.055] WriteFile (in: hFile=0x270, lpBuffer=0x21b85b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b85b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.056] WriteFile (in: hFile=0x270, lpBuffer=0x21b85b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b85b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.056] WriteFile (in: hFile=0x270, lpBuffer=0x21b85b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b85b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.056] WriteFile (in: hFile=0x270, lpBuffer=0x21b85b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b85b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.057] WriteFile (in: hFile=0x270, lpBuffer=0x21b85b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b85b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.057] WriteFile (in: hFile=0x270, lpBuffer=0x21b85b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b85b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.058] WriteFile (in: hFile=0x270, lpBuffer=0x21b85b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b85b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.058] WriteFile (in: hFile=0x270, lpBuffer=0x21b85b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b85b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.058] WriteFile (in: hFile=0x270, lpBuffer=0x21b85b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b85b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.059] WriteFile (in: hFile=0x270, lpBuffer=0x21b85b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b85b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.059] WriteFile (in: hFile=0x270, lpBuffer=0x21b85b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b85b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.059] WriteFile (in: hFile=0x270, lpBuffer=0x21b85b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b85b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.060] WriteFile (in: hFile=0x270, lpBuffer=0x21b85b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b85b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.060] WriteFile (in: hFile=0x270, lpBuffer=0x21b85b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b85b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.060] WriteFile (in: hFile=0x270, lpBuffer=0x21b85b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b85b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.061] WriteFile (in: hFile=0x270, lpBuffer=0x21b85b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b85b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.061] WriteFile (in: hFile=0x270, lpBuffer=0x21b85b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b85b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.061] WriteFile (in: hFile=0x270, lpBuffer=0x21b85b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b85b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.062] WriteFile (in: hFile=0x270, lpBuffer=0x21b85b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b85b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.062] WriteFile (in: hFile=0x270, lpBuffer=0x21b85b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b85b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.062] WriteFile (in: hFile=0x270, lpBuffer=0x21b85b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b85b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.063] WriteFile (in: hFile=0x270, lpBuffer=0x21b85b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b85b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.063] WriteFile (in: hFile=0x270, lpBuffer=0x21b85b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b85b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.063] WriteFile (in: hFile=0x270, lpBuffer=0x21b85b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b85b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.064] WriteFile (in: hFile=0x270, lpBuffer=0x21b85b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b85b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.064] WriteFile (in: hFile=0x270, lpBuffer=0x21b85b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b85b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.064] WriteFile (in: hFile=0x270, lpBuffer=0x21b85b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b85b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.065] WriteFile (in: hFile=0x270, lpBuffer=0x21b85b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b85b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.065] WriteFile (in: hFile=0x270, lpBuffer=0x21b85b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b85b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.065] WriteFile (in: hFile=0x270, lpBuffer=0x21b85b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b85b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.065] WriteFile (in: hFile=0x270, lpBuffer=0x21b85b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b85b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.066] WriteFile (in: hFile=0x270, lpBuffer=0x21b85b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21b85b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.066] WriteFile (in: hFile=0x270, lpBuffer=0x21b85b0*, nNumberOfBytesToWrite=0xe5c, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x21b85b0*, lpNumberOfBytesWritten=0x14de38*=0xe5c, lpOverlapped=0x0) returned 1 [0061.067] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0061.067] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0061.068] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.068] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0061.068] DrawTextExW (in: hdc=0x8010893, lpchText="96 Files\r\nEncrypted", cchText=19, lprc=0x14dd18, format=0x2400, lpdtp=0x21b97a8 | out: lpchText="96 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0061.068] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.068] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.068] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.068] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.068] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0061.068] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0061.068] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\QhSH0cZj.bmp", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\QhSH0cZj.bmp", lpFilePart=0x0) returned 0x33 [0061.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0061.068] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\QhSH0cZj.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\qhsh0czj.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0061.069] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0xb10f [0061.069] ReadFile (in: hFile=0x270, lpBuffer=0x21b9bc8, nNumberOfBytesToRead=0xb10f, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x21b9bc8*, lpNumberOfBytesRead=0x14df78*=0xb10f, lpOverlapped=0x0) returned 1 [0061.071] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\QhSH0cZj.bmp", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\QhSH0cZj.bmp", lpFilePart=0x0) returned 0x33 [0061.071] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\QhSH0cZj.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\qhsh0czj.bmp")) returned 1 [0061.073] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\QhSH0cZj.bmp.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\QhSH0cZj.bmp.sad", lpFilePart=0x0) returned 0x37 [0061.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0061.074] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\QhSH0cZj.bmp.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\qhsh0czj.bmp.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0061.074] WriteFile (in: hFile=0x270, lpBuffer=0x21c6490*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21c6490*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.075] WriteFile (in: hFile=0x270, lpBuffer=0x21c6490*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21c6490*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.076] WriteFile (in: hFile=0x270, lpBuffer=0x21c6490*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21c6490*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.076] WriteFile (in: hFile=0x270, lpBuffer=0x21c6490*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21c6490*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.077] WriteFile (in: hFile=0x270, lpBuffer=0x21c6490*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21c6490*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.077] WriteFile (in: hFile=0x270, lpBuffer=0x21c6490*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21c6490*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.077] WriteFile (in: hFile=0x270, lpBuffer=0x21c6490*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21c6490*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.077] WriteFile (in: hFile=0x270, lpBuffer=0x21c6490*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21c6490*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.078] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0061.079] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0061.079] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.079] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0061.079] DrawTextExW (in: hdc=0x8010893, lpchText="97 Files\r\nEncrypted", cchText=19, lprc=0x14dd18, format=0x2400, lpdtp=0x21c7688 | out: lpchText="97 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0061.079] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.079] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.079] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.079] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.079] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.079] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.079] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.079] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.079] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0061.080] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0061.080] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Wn0Q R-H-uB l G.png", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Wn0Q R-H-uB l G.png", lpFilePart=0x0) returned 0x3a [0061.080] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0061.080] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Wn0Q R-H-uB l G.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wn0q r-h-ub l g.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.080] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0061.080] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x3a3d [0061.080] ReadFile (in: hFile=0x270, lpBuffer=0x21c7cd0, nNumberOfBytesToRead=0x3a3d, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x21c7cd0*, lpNumberOfBytesRead=0x14df78*=0x3a3d, lpOverlapped=0x0) returned 1 [0061.081] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Wn0Q R-H-uB l G.png", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Wn0Q R-H-uB l G.png", lpFilePart=0x0) returned 0x3a [0061.081] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Wn0Q R-H-uB l G.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wn0q r-h-ub l g.png")) returned 1 [0061.083] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Wn0Q R-H-uB l G.png.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Wn0Q R-H-uB l G.png.sad", lpFilePart=0x0) returned 0x3e [0061.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0061.083] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Wn0Q R-H-uB l G.png.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wn0q r-h-ub l g.png.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0061.085] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0061.085] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0061.085] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.085] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0061.085] DrawTextExW (in: hdc=0x8010893, lpchText="98 Files\r\nEncrypted", cchText=19, lprc=0x14dd18, format=0x2400, lpdtp=0x21d7c68 | out: lpchText="98 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0061.085] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.085] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.085] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.086] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.086] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0061.086] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0061.086] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wrJdTx83G94bEufJ3yvL.png", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wrJdTx83G94bEufJ3yvL.png", lpFilePart=0x0) returned 0x3f [0061.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0061.086] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wrJdTx83G94bEufJ3yvL.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wrjdtx83g94beufj3yvl.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0061.086] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x18d2d [0061.086] ReadFile (in: hFile=0x270, lpBuffer=0x1222e370, nNumberOfBytesToRead=0x18d2d, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x1222e370*, lpNumberOfBytesRead=0x14df78*=0x18d2d, lpOverlapped=0x0) returned 1 [0061.092] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wrJdTx83G94bEufJ3yvL.png", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wrJdTx83G94bEufJ3yvL.png", lpFilePart=0x0) returned 0x3f [0061.092] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wrJdTx83G94bEufJ3yvL.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wrjdtx83g94beufj3yvl.png")) returned 1 [0061.094] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wrJdTx83G94bEufJ3yvL.png.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wrJdTx83G94bEufJ3yvL.png.sad", lpFilePart=0x0) returned 0x43 [0061.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0061.094] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\wrJdTx83G94bEufJ3yvL.png.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\wrjdtx83g94beufj3yvl.png.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0061.098] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0061.098] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0061.098] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.098] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0061.098] DrawTextExW (in: hdc=0x8010893, lpchText="99 Files\r\nEncrypted", cchText=19, lprc=0x14dd18, format=0x2400, lpdtp=0x21daac8 | out: lpchText="99 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0061.098] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.098] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.098] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.099] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.099] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e190) returned 1 [0061.099] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", nBufferLength=0x105, lpBuffer=0x14dc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures", lpFilePart=0x0) returned 0x26 [0061.099] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\", nBufferLength=0x105, lpBuffer=0x14dc20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\", lpFilePart=0x0) returned 0x27 [0061.099] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", lpFindFileData=0x14de30 | out: lpFindFileData=0x14de30) returned 0xa748e0 [0061.099] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.099] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.099] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.100] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.100] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.100] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.100] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.100] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.100] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.101] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.101] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 0 [0061.101] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0061.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e0e0) returned 1 [0061.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e0a0) returned 1 [0061.101] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.101] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.101] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.101] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.101] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14d9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x48 [0061.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dea0) returned 1 [0061.101] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de10) returned 1 [0061.103] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.103] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e080) returned 1 [0061.103] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt", lpFilePart=0x0) returned 0x33 [0061.103] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\", nBufferLength=0x105, lpBuffer=0x14db10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\", lpFilePart=0x0) returned 0x34 [0061.103] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\*", lpFindFileData=0x14dd20 | out: lpFindFileData=0x14dd20) returned 0xa748e0 [0061.103] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.103] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.104] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.104] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.104] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.104] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.104] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.105] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.105] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.105] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.105] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.105] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 0 [0061.105] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0061.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dfd0) returned 1 [0061.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14df90) returned 1 [0061.106] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.106] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.106] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0061.106] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0061.106] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\3ZTyaxoFkmaSG8M7OwFz.gif", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\3ZTyaxoFkmaSG8M7OwFz.gif", lpFilePart=0x0) returned 0x4c [0061.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0061.106] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\3ZTyaxoFkmaSG8M7OwFz.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\3ztyaxofkmasg8m7owfz.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0061.106] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0xd846 [0061.106] ReadFile (in: hFile=0x270, lpBuffer=0x21e16c8, nNumberOfBytesToRead=0xd846, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x21e16c8*, lpNumberOfBytesRead=0x14de68*=0xd846, lpOverlapped=0x0) returned 1 [0061.109] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\3ZTyaxoFkmaSG8M7OwFz.gif", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\3ZTyaxoFkmaSG8M7OwFz.gif", lpFilePart=0x0) returned 0x4c [0061.109] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\3ZTyaxoFkmaSG8M7OwFz.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\3ztyaxofkmasg8m7owfz.gif")) returned 1 [0061.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\3ZTyaxoFkmaSG8M7OwFz.gif.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\3ZTyaxoFkmaSG8M7OwFz.gif.sad", lpFilePart=0x0) returned 0x50 [0061.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0061.112] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\3ZTyaxoFkmaSG8M7OwFz.gif.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\3ztyaxofkmasg8m7owfz.gif.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0061.114] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0061.114] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0061.115] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.115] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0061.115] DrawTextExW (in: hdc=0x8010893, lpchText="100 Files\r\nEncrypted", cchText=20, lprc=0x14dc08, format=0x2400, lpdtp=0x21f1988 | out: lpchText="100 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0061.115] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.115] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.115] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.115] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.115] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0061.115] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0061.115] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\acgGN0a76ZU_J7ymqXYx.jpg", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\acgGN0a76ZU_J7ymqXYx.jpg", lpFilePart=0x0) returned 0x4c [0061.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0061.115] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\acgGN0a76ZU_J7ymqXYx.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\acggn0a76zu_j7ymqxyx.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0061.115] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x8e2e [0061.116] ReadFile (in: hFile=0x270, lpBuffer=0x21f1e10, nNumberOfBytesToRead=0x8e2e, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x21f1e10*, lpNumberOfBytesRead=0x14de68*=0x8e2e, lpOverlapped=0x0) returned 1 [0061.118] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\acgGN0a76ZU_J7ymqXYx.jpg", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\acgGN0a76ZU_J7ymqXYx.jpg", lpFilePart=0x0) returned 0x4c [0061.118] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\acgGN0a76ZU_J7ymqXYx.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\acggn0a76zu_j7ymqxyx.jpg")) returned 1 [0061.120] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\acgGN0a76ZU_J7ymqXYx.jpg.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\acgGN0a76ZU_J7ymqXYx.jpg.sad", lpFilePart=0x0) returned 0x50 [0061.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0061.120] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\acgGN0a76ZU_J7ymqXYx.jpg.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\acggn0a76zu_j7ymqxyx.jpg.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0061.122] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0061.122] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0061.123] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.123] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0061.123] DrawTextExW (in: hdc=0x8010893, lpchText="101 Files\r\nEncrypted", cchText=20, lprc=0x14dc08, format=0x2400, lpdtp=0x21fd6b8 | out: lpchText="101 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0061.123] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.123] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.123] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.123] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.123] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0061.123] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0061.123] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\Dd0xh-zgSIy-.bmp", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\Dd0xh-zgSIy-.bmp", lpFilePart=0x0) returned 0x44 [0061.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0061.123] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\Dd0xh-zgSIy-.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\dd0xh-zgsiy-.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0061.124] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0xcf45 [0061.124] ReadFile (in: hFile=0x270, lpBuffer=0x21fdb10, nNumberOfBytesToRead=0xcf45, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x21fdb10*, lpNumberOfBytesRead=0x14de68*=0xcf45, lpOverlapped=0x0) returned 1 [0061.126] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\Dd0xh-zgSIy-.bmp", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\Dd0xh-zgSIy-.bmp", lpFilePart=0x0) returned 0x44 [0061.126] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\Dd0xh-zgSIy-.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\dd0xh-zgsiy-.bmp")) returned 1 [0061.128] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\Dd0xh-zgSIy-.bmp.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\Dd0xh-zgSIy-.bmp.sad", lpFilePart=0x0) returned 0x48 [0061.128] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0061.128] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\Dd0xh-zgSIy-.bmp.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\dd0xh-zgsiy-.bmp.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.128] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0061.130] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0061.130] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0061.131] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.131] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0061.131] DrawTextExW (in: hdc=0x8010893, lpchText="102 Files\r\nEncrypted", cchText=20, lprc=0x14dc08, format=0x2400, lpdtp=0x220d490 | out: lpchText="102 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0061.131] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.131] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.131] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.131] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.131] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0061.131] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0061.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\EbX5nSz45NkAByxUXviC.jpg", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\EbX5nSz45NkAByxUXviC.jpg", lpFilePart=0x0) returned 0x4c [0061.131] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0061.131] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\EbX5nSz45NkAByxUXviC.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\ebx5nsz45nkabyxuxvic.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.131] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0061.132] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x11271 [0061.132] ReadFile (in: hFile=0x270, lpBuffer=0x220d918, nNumberOfBytesToRead=0x11271, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x220d918*, lpNumberOfBytesRead=0x14de68*=0x11271, lpOverlapped=0x0) returned 1 [0061.134] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\EbX5nSz45NkAByxUXviC.jpg", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\EbX5nSz45NkAByxUXviC.jpg", lpFilePart=0x0) returned 0x4c [0061.135] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\EbX5nSz45NkAByxUXviC.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\ebx5nsz45nkabyxuxvic.jpg")) returned 1 [0061.137] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\EbX5nSz45NkAByxUXviC.jpg.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\EbX5nSz45NkAByxUXviC.jpg.sad", lpFilePart=0x0) returned 0x50 [0061.137] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0061.137] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\EbX5nSz45NkAByxUXviC.jpg.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\ebx5nsz45nkabyxuxvic.jpg.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.137] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0061.140] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0061.140] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0061.140] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.140] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0061.140] DrawTextExW (in: hdc=0x8010893, lpchText="103 Files\r\nEncrypted", cchText=20, lprc=0x14dc08, format=0x2400, lpdtp=0x2221608 | out: lpchText="103 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0061.141] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.141] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.141] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.141] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.141] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0061.141] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0061.141] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\iqWuQZN.gif", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\iqWuQZN.gif", lpFilePart=0x0) returned 0x3f [0061.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0061.141] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\iqWuQZN.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\iqwuqzn.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0061.141] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x37a8 [0061.141] ReadFile (in: hFile=0x270, lpBuffer=0x2221a30, nNumberOfBytesToRead=0x37a8, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x2221a30*, lpNumberOfBytesRead=0x14de68*=0x37a8, lpOverlapped=0x0) returned 1 [0061.142] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\iqWuQZN.gif", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\iqWuQZN.gif", lpFilePart=0x0) returned 0x3f [0061.142] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\iqWuQZN.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\iqwuqzn.gif")) returned 1 [0061.144] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\iqWuQZN.gif.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\iqWuQZN.gif.sad", lpFilePart=0x0) returned 0x43 [0061.144] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0061.144] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\iqWuQZN.gif.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\iqwuqzn.gif.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.144] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0061.146] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0061.146] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0061.146] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.146] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0061.146] DrawTextExW (in: hdc=0x8010893, lpchText="104 Files\r\nEncrypted", cchText=20, lprc=0x14dc08, format=0x2400, lpdtp=0x2231060 | out: lpchText="104 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0061.146] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.146] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.146] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.146] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.146] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.146] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.147] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.147] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.147] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0061.147] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0061.147] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\stC8TDSz_Qw8RvK.bmp", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\stC8TDSz_Qw8RvK.bmp", lpFilePart=0x0) returned 0x47 [0061.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0061.147] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\stC8TDSz_Qw8RvK.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\stc8tdsz_qw8rvk.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0061.147] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x2f0a [0061.147] ReadFile (in: hFile=0x270, lpBuffer=0x22316c0, nNumberOfBytesToRead=0x2f0a, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x22316c0*, lpNumberOfBytesRead=0x14de68*=0x2f0a, lpOverlapped=0x0) returned 1 [0061.148] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\stC8TDSz_Qw8RvK.bmp", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\stC8TDSz_Qw8RvK.bmp", lpFilePart=0x0) returned 0x47 [0061.148] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\stC8TDSz_Qw8RvK.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\stc8tdsz_qw8rvk.bmp")) returned 1 [0061.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\stC8TDSz_Qw8RvK.bmp.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\stC8TDSz_Qw8RvK.bmp.sad", lpFilePart=0x0) returned 0x4b [0061.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0061.150] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\stC8TDSz_Qw8RvK.bmp.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\stc8tdsz_qw8rvk.bmp.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0061.152] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0061.152] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0061.152] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.152] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0061.152] DrawTextExW (in: hdc=0x8010893, lpchText="105 Files\r\nEncrypted", cchText=20, lprc=0x14dc08, format=0x2400, lpdtp=0x223ed98 | out: lpchText="105 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0061.152] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.152] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.152] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.152] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e080) returned 1 [0061.153] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt", lpFilePart=0x0) returned 0x33 [0061.153] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\", nBufferLength=0x105, lpBuffer=0x14db10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\", lpFilePart=0x0) returned 0x34 [0061.153] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\*", lpFindFileData=0x14dd20 | out: lpFindFileData=0x14dd20) returned 0xa748e0 [0061.153] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.153] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.153] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.154] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.154] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.154] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.154] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.154] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.154] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.155] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.155] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.155] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 0 [0061.155] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0061.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dfd0) returned 1 [0061.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14df90) returned 1 [0061.155] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.155] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.155] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.155] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.155] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x56 [0061.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dd90) returned 1 [0061.155] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd00) returned 1 [0061.156] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.157] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14df70) returned 1 [0061.157] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP", lpFilePart=0x0) returned 0x41 [0061.157] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\", nBufferLength=0x105, lpBuffer=0x14da00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\", lpFilePart=0x0) returned 0x42 [0061.157] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\*", lpFindFileData=0x14dc10 | out: lpFindFileData=0x14dc10) returned 0xa748e0 [0061.157] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.157] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.157] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.157] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.158] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.158] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.158] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.158] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 0 [0061.158] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0061.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dec0) returned 1 [0061.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de80) returned 1 [0061.159] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.159] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.159] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0061.159] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0061.159] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\pBfzmJL.jpg", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\pBfzmJL.jpg", lpFilePart=0x0) returned 0x4d [0061.159] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0061.159] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\pBfzmJL.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\pbfzmjl.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.159] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0061.159] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x18ca1 [0061.160] ReadFile (in: hFile=0x270, lpBuffer=0x123155b8, nNumberOfBytesToRead=0x18ca1, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x123155b8*, lpNumberOfBytesRead=0x14dd58*=0x18ca1, lpOverlapped=0x0) returned 1 [0061.163] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\pBfzmJL.jpg", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\pBfzmJL.jpg", lpFilePart=0x0) returned 0x4d [0061.163] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\pBfzmJL.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\pbfzmjl.jpg")) returned 1 [0061.166] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\pBfzmJL.jpg.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\pBfzmJL.jpg.sad", lpFilePart=0x0) returned 0x51 [0061.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0061.166] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\pBfzmJL.jpg.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\pbfzmjl.jpg.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0061.170] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0061.170] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0061.171] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.171] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0061.171] DrawTextExW (in: hdc=0x8010893, lpchText="106 Files\r\nEncrypted", cchText=20, lprc=0x14daf8, format=0x2400, lpdtp=0x22481b0 | out: lpchText="106 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0061.171] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.171] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.171] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.171] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.171] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.171] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.171] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.171] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.171] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0061.171] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0061.171] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\uoGJJDwB88v1G.gif", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\uoGJJDwB88v1G.gif", lpFilePart=0x0) returned 0x53 [0061.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0061.171] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\uoGJJDwB88v1G.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\uogjjdwb88v1g.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0061.172] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x1690f [0061.172] ReadFile (in: hFile=0x270, lpBuffer=0x12370488, nNumberOfBytesToRead=0x1690f, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x12370488*, lpNumberOfBytesRead=0x14dd58*=0x1690f, lpOverlapped=0x0) returned 1 [0061.176] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\uoGJJDwB88v1G.gif", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\uoGJJDwB88v1G.gif", lpFilePart=0x0) returned 0x53 [0061.176] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\uoGJJDwB88v1G.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\uogjjdwb88v1g.gif")) returned 1 [0061.178] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\uoGJJDwB88v1G.gif.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\uoGJJDwB88v1G.gif.sad", lpFilePart=0x0) returned 0x57 [0061.178] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0061.178] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\uoGJJDwB88v1G.gif.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\uogjjdwb88v1g.gif.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.178] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0061.181] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0061.181] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0061.181] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.181] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0061.181] DrawTextExW (in: hdc=0x8010893, lpchText="107 Files\r\nEncrypted", cchText=20, lprc=0x14daf8, format=0x2400, lpdtp=0x224b290 | out: lpchText="107 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0061.181] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.181] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.181] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.181] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.181] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0061.181] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0061.182] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\yH1IEKOtJ0KC.gif", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\yH1IEKOtJ0KC.gif", lpFilePart=0x0) returned 0x52 [0061.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0061.182] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\yH1IEKOtJ0KC.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\yh1iekotj0kc.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.182] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0061.182] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x4b56 [0061.182] ReadFile (in: hFile=0x270, lpBuffer=0x224b700, nNumberOfBytesToRead=0x4b56, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x224b700*, lpNumberOfBytesRead=0x14dd58*=0x4b56, lpOverlapped=0x0) returned 1 [0061.183] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\yH1IEKOtJ0KC.gif", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\yH1IEKOtJ0KC.gif", lpFilePart=0x0) returned 0x52 [0061.183] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\yH1IEKOtJ0KC.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\yh1iekotj0kc.gif")) returned 1 [0061.184] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\yH1IEKOtJ0KC.gif.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\yH1IEKOtJ0KC.gif.sad", lpFilePart=0x0) returned 0x56 [0061.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0061.184] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\yH1IEKOtJ0KC.gif.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\yh1iekotj0kc.gif.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0061.186] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0061.186] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0061.186] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.186] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0061.186] DrawTextExW (in: hdc=0x8010893, lpchText="108 Files\r\nEncrypted", cchText=20, lprc=0x14daf8, format=0x2400, lpdtp=0x225f5e0 | out: lpchText="108 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0061.186] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.186] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.186] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.186] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14df70) returned 1 [0061.186] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP", lpFilePart=0x0) returned 0x41 [0061.186] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\", nBufferLength=0x105, lpBuffer=0x14da00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\", lpFilePart=0x0) returned 0x42 [0061.186] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\*", lpFindFileData=0x14dc10 | out: lpFindFileData=0x14dc10) returned 0xa748e0 [0061.187] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.187] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.187] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.187] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.187] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.188] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.188] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.188] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 0 [0061.188] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0061.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dec0) returned 1 [0061.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de80) returned 1 [0061.188] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.188] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.188] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0061.188] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0061.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14d7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x61 [0061.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc80) returned 1 [0061.188] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\5xrztujyaf\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dbf0) returned 1 [0061.190] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0061.190] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0061.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14de60) returned 1 [0061.190] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf", lpFilePart=0x0) returned 0x4c [0061.190] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\", nBufferLength=0x105, lpBuffer=0x14d8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\", lpFilePart=0x0) returned 0x4d [0061.190] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\*", lpFindFileData=0x14db00 | out: lpFindFileData=0x14db00) returned 0xa748e0 [0061.190] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0061.191] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0061.191] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0061.191] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0061.191] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0061.191] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0061.191] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 0 [0061.191] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0061.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14ddb0) returned 1 [0061.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd70) returned 1 [0061.192] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0061.192] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0061.192] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0061.192] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0061.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\-aWnGxiev0I8m7HIi4.bmp", nBufferLength=0x105, lpBuffer=0x14d6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\-aWnGxiev0I8m7HIi4.bmp", lpFilePart=0x0) returned 0x63 [0061.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14db80) returned 1 [0061.192] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\-aWnGxiev0I8m7HIi4.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\5xrztujyaf\\-awngxiev0i8m7hii4.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14daf0) returned 1 [0061.192] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14dd18 | out: lpFileSizeHigh=0x14dd18*=0x0) returned 0x10c79 [0061.192] ReadFile (in: hFile=0x270, lpBuffer=0x2265a30, nNumberOfBytesToRead=0x10c79, lpNumberOfBytesRead=0x14dc48, lpOverlapped=0x0 | out: lpBuffer=0x2265a30*, lpNumberOfBytesRead=0x14dc48*=0x10c79, lpOverlapped=0x0) returned 1 [0061.195] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\-aWnGxiev0I8m7HIi4.bmp", nBufferLength=0x105, lpBuffer=0x14d840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\-aWnGxiev0I8m7HIi4.bmp", lpFilePart=0x0) returned 0x63 [0061.195] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\-aWnGxiev0I8m7HIi4.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\5xrztujyaf\\-awngxiev0i8m7hii4.bmp")) returned 1 [0061.197] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\-aWnGxiev0I8m7HIi4.bmp.sad", nBufferLength=0x105, lpBuffer=0x14d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\-aWnGxiev0I8m7HIi4.bmp.sad", lpFilePart=0x0) returned 0x67 [0061.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dac0) returned 1 [0061.197] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\-aWnGxiev0I8m7HIi4.bmp.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\5xrztujyaf\\-awngxiev0i8m7hii4.bmp.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14da30) returned 1 [0061.200] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0061.200] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0061.201] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.201] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0061.201] DrawTextExW (in: hdc=0x8010893, lpchText="109 Files\r\nEncrypted", cchText=20, lprc=0x14d9e8, format=0x2400, lpdtp=0x2279198 | out: lpchText="109 Files\r\nEncrypted", lprc=0x14d9e8) returned 26 [0061.201] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0061.201] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0061.201] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0061.201] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0061.201] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0061.201] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0061.201] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\JC1q1kXM.jpg", nBufferLength=0x105, lpBuffer=0x14d6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\JC1q1kXM.jpg", lpFilePart=0x0) returned 0x59 [0061.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14db80) returned 1 [0061.201] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\JC1q1kXM.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\5xrztujyaf\\jc1q1kxm.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14daf0) returned 1 [0061.201] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14dd18 | out: lpFileSizeHigh=0x14dd18*=0x0) returned 0x4e71 [0061.202] ReadFile (in: hFile=0x270, lpBuffer=0x2279608, nNumberOfBytesToRead=0x4e71, lpNumberOfBytesRead=0x14dc48, lpOverlapped=0x0 | out: lpBuffer=0x2279608*, lpNumberOfBytesRead=0x14dc48*=0x4e71, lpOverlapped=0x0) returned 1 [0061.202] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\JC1q1kXM.jpg", nBufferLength=0x105, lpBuffer=0x14d840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\JC1q1kXM.jpg", lpFilePart=0x0) returned 0x59 [0061.202] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\JC1q1kXM.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\5xrztujyaf\\jc1q1kxm.jpg")) returned 1 [0061.204] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\JC1q1kXM.jpg.sad", nBufferLength=0x105, lpBuffer=0x14d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\JC1q1kXM.jpg.sad", lpFilePart=0x0) returned 0x5d [0061.204] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dac0) returned 1 [0061.204] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\JC1q1kXM.jpg.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\5xrztujyaf\\jc1q1kxm.jpg.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14da30) returned 1 [0061.206] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0061.206] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0061.206] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.206] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0061.206] DrawTextExW (in: hdc=0x8010893, lpchText="110 Files\r\nEncrypted", cchText=20, lprc=0x14d9e8, format=0x2400, lpdtp=0x228e078 | out: lpchText="110 Files\r\nEncrypted", lprc=0x14d9e8) returned 26 [0061.207] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0061.207] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0061.207] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0061.207] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0061.207] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0061.207] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0061.207] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0061.207] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0061.207] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0061.207] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0061.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\wIQLw8TYqxS.png", nBufferLength=0x105, lpBuffer=0x14d6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\wIQLw8TYqxS.png", lpFilePart=0x0) returned 0x5c [0061.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14db80) returned 1 [0061.207] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\wIQLw8TYqxS.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\5xrztujyaf\\wiqlw8tyqxs.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14daf0) returned 1 [0061.207] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14dd18 | out: lpFileSizeHigh=0x14dd18*=0x0) returned 0xa5d [0061.208] ReadFile (in: hFile=0x270, lpBuffer=0x228f170, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14dc48, lpOverlapped=0x0 | out: lpBuffer=0x228f170*, lpNumberOfBytesRead=0x14dc48*=0xa5d, lpOverlapped=0x0) returned 1 [0061.208] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\wIQLw8TYqxS.png", nBufferLength=0x105, lpBuffer=0x14d840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\wIQLw8TYqxS.png", lpFilePart=0x0) returned 0x5c [0061.208] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\wIQLw8TYqxS.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\5xrztujyaf\\wiqlw8tyqxs.png")) returned 1 [0061.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\wIQLw8TYqxS.png.sad", nBufferLength=0x105, lpBuffer=0x14d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\wIQLw8TYqxS.png.sad", lpFilePart=0x0) returned 0x60 [0061.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dac0) returned 1 [0061.210] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\wIQLw8TYqxS.png.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\5xrztujyaf\\wiqlw8tyqxs.png.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14da30) returned 1 [0061.211] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0061.211] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0061.212] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.212] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0061.212] DrawTextExW (in: hdc=0x8010893, lpchText="111 Files\r\nEncrypted", cchText=20, lprc=0x14d9e8, format=0x2400, lpdtp=0x22947f8 | out: lpchText="111 Files\r\nEncrypted", lprc=0x14d9e8) returned 26 [0061.212] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0061.212] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0061.212] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0061.212] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0061.212] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0061.213] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0061.213] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\X8yNY.jpg", nBufferLength=0x105, lpBuffer=0x14d6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\X8yNY.jpg", lpFilePart=0x0) returned 0x56 [0061.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14db80) returned 1 [0061.213] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\X8yNY.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\5xrztujyaf\\x8yny.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14daf0) returned 1 [0061.213] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14dd18 | out: lpFileSizeHigh=0x14dd18*=0x0) returned 0x12711 [0061.213] ReadFile (in: hFile=0x270, lpBuffer=0x2294c50, nNumberOfBytesToRead=0x12711, lpNumberOfBytesRead=0x14dc48, lpOverlapped=0x0 | out: lpBuffer=0x2294c50*, lpNumberOfBytesRead=0x14dc48*=0x12711, lpOverlapped=0x0) returned 1 [0061.216] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\X8yNY.jpg", nBufferLength=0x105, lpBuffer=0x14d840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\X8yNY.jpg", lpFilePart=0x0) returned 0x56 [0061.216] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\X8yNY.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\5xrztujyaf\\x8yny.jpg")) returned 1 [0061.220] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\X8yNY.jpg.sad", nBufferLength=0x105, lpBuffer=0x14d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\X8yNY.jpg.sad", lpFilePart=0x0) returned 0x5a [0061.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dac0) returned 1 [0061.220] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\X8yNY.jpg.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\5xrztujyaf\\x8yny.jpg.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14da30) returned 1 [0061.223] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0061.223] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0061.223] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.223] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0061.224] DrawTextExW (in: hdc=0x8010893, lpchText="112 Files\r\nEncrypted", cchText=20, lprc=0x14d9e8, format=0x2400, lpdtp=0x22a9df0 | out: lpchText="112 Files\r\nEncrypted", lprc=0x14d9e8) returned 26 [0061.224] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0061.224] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0061.224] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0061.224] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0061.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14de60) returned 1 [0061.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf", lpFilePart=0x0) returned 0x4c [0061.224] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\", nBufferLength=0x105, lpBuffer=0x14d8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\", lpFilePart=0x0) returned 0x4d [0061.224] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\5XRZtuJyaf\\*", lpFindFileData=0x14db00 | out: lpFindFileData=0x14db00) returned 0xa748e0 [0061.224] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0061.224] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0061.225] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0061.225] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0061.225] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0061.225] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0061.225] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 0 [0061.226] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0061.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14ddb0) returned 1 [0061.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd70) returned 1 [0061.226] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0061.226] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0061.226] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.226] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.226] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.226] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.226] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0061.226] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0061.226] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14d7a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x5f [0061.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc80) returned 1 [0061.226] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\zjv2v 97\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dbf0) returned 1 [0061.227] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0061.228] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0061.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14de60) returned 1 [0061.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97", lpFilePart=0x0) returned 0x4a [0061.228] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\", nBufferLength=0x105, lpBuffer=0x14d8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\", lpFilePart=0x0) returned 0x4b [0061.228] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\*", lpFindFileData=0x14db00 | out: lpFindFileData=0x14db00) returned 0xa748e0 [0061.228] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0061.228] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0061.228] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0061.228] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0061.229] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0061.229] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0061.229] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0061.229] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 0 [0061.229] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0061.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14ddb0) returned 1 [0061.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd70) returned 1 [0061.230] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0061.230] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0061.230] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0061.230] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0061.230] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\ayOHR5FQucKL7.bmp", nBufferLength=0x105, lpBuffer=0x14d6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\ayOHR5FQucKL7.bmp", lpFilePart=0x0) returned 0x5c [0061.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14db80) returned 1 [0061.230] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\ayOHR5FQucKL7.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\zjv2v 97\\ayohr5fquckl7.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14daf0) returned 1 [0061.230] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14dd18 | out: lpFileSizeHigh=0x14dd18*=0x0) returned 0x16f04 [0061.231] ReadFile (in: hFile=0x270, lpBuffer=0x12421030, nNumberOfBytesToRead=0x16f04, lpNumberOfBytesRead=0x14dc48, lpOverlapped=0x0 | out: lpBuffer=0x12421030*, lpNumberOfBytesRead=0x14dc48*=0x16f04, lpOverlapped=0x0) returned 1 [0061.235] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\ayOHR5FQucKL7.bmp", nBufferLength=0x105, lpBuffer=0x14d840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\ayOHR5FQucKL7.bmp", lpFilePart=0x0) returned 0x5c [0061.235] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\ayOHR5FQucKL7.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\zjv2v 97\\ayohr5fquckl7.bmp")) returned 1 [0061.237] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\ayOHR5FQucKL7.bmp.sad", nBufferLength=0x105, lpBuffer=0x14d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\ayOHR5FQucKL7.bmp.sad", lpFilePart=0x0) returned 0x60 [0061.237] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dac0) returned 1 [0061.237] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\ayOHR5FQucKL7.bmp.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\zjv2v 97\\ayohr5fquckl7.bmp.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.238] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14da30) returned 1 [0061.241] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0061.241] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0061.241] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.241] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0061.241] DrawTextExW (in: hdc=0x8010893, lpchText="113 Files\r\nEncrypted", cchText=20, lprc=0x14d9e8, format=0x2400, lpdtp=0x22b3068 | out: lpchText="113 Files\r\nEncrypted", lprc=0x14d9e8) returned 26 [0061.242] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0061.242] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0061.242] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0061.242] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0061.242] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0061.242] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0061.242] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0061.242] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0061.242] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0061.242] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0061.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\x0P4aiO.jpg", nBufferLength=0x105, lpBuffer=0x14d6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\x0P4aiO.jpg", lpFilePart=0x0) returned 0x56 [0061.242] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14db80) returned 1 [0061.242] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\x0P4aiO.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\zjv2v 97\\x0p4aio.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.242] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14daf0) returned 1 [0061.242] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14dd18 | out: lpFileSizeHigh=0x14dd18*=0x0) returned 0xab44 [0061.242] ReadFile (in: hFile=0x270, lpBuffer=0x22b36c8, nNumberOfBytesToRead=0xab44, lpNumberOfBytesRead=0x14dc48, lpOverlapped=0x0 | out: lpBuffer=0x22b36c8*, lpNumberOfBytesRead=0x14dc48*=0xab44, lpOverlapped=0x0) returned 1 [0061.267] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\x0P4aiO.jpg", nBufferLength=0x105, lpBuffer=0x14d840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\x0P4aiO.jpg", lpFilePart=0x0) returned 0x56 [0061.267] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\x0P4aiO.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\zjv2v 97\\x0p4aio.jpg")) returned 1 [0061.269] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\x0P4aiO.jpg.sad", nBufferLength=0x105, lpBuffer=0x14d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\x0P4aiO.jpg.sad", lpFilePart=0x0) returned 0x5a [0061.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dac0) returned 1 [0061.269] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\x0P4aiO.jpg.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\zjv2v 97\\x0p4aio.jpg.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.270] GetFileType (hFile=0x270) returned 0x1 [0061.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14da30) returned 1 [0061.270] GetFileType (hFile=0x270) returned 0x1 [0061.270] WriteFile (in: hFile=0x270, lpBuffer=0x213f130*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x213f130*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.271] WriteFile (in: hFile=0x270, lpBuffer=0x213f130*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x213f130*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.272] WriteFile (in: hFile=0x270, lpBuffer=0x213f130*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x213f130*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.272] WriteFile (in: hFile=0x270, lpBuffer=0x213f130*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x213f130*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.272] WriteFile (in: hFile=0x270, lpBuffer=0x213f130*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x213f130*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.272] WriteFile (in: hFile=0x270, lpBuffer=0x213f130*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x213f130*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.273] WriteFile (in: hFile=0x270, lpBuffer=0x213f130*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x213f130*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.273] WriteFile (in: hFile=0x270, lpBuffer=0x213f130*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x213f130*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.274] WriteFile (in: hFile=0x270, lpBuffer=0x213f130*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x213f130*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.274] WriteFile (in: hFile=0x270, lpBuffer=0x213f130*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x213f130*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.274] WriteFile (in: hFile=0x270, lpBuffer=0x213f130*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x213f130*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.275] WriteFile (in: hFile=0x270, lpBuffer=0x213f130*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x213f130*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.275] WriteFile (in: hFile=0x270, lpBuffer=0x213f130*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x213f130*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.275] WriteFile (in: hFile=0x270, lpBuffer=0x213f130*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x213f130*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.275] WriteFile (in: hFile=0x270, lpBuffer=0x213f130*, nNumberOfBytesToWrite=0x45c, lpNumberOfBytesWritten=0x14db08, lpOverlapped=0x0 | out: lpBuffer=0x213f130*, lpNumberOfBytesWritten=0x14db08*=0x45c, lpOverlapped=0x0) returned 1 [0061.276] CloseHandle (hObject=0x270) returned 1 [0061.277] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0061.278] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 1 [0061.278] PeekMessageW (in: lpMsg=0x2116508, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2116508) returned 1 [0061.278] IsWindowUnicode (hWnd=0x301ee) returned 1 [0061.278] GetMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14dc60) returned 1 [0061.278] TranslateMessage (lpMsg=0x14dc60) returned 0 [0061.278] DispatchMessageW (lpMsg=0x14dc60) returned 0x0 [0061.279] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0061.279] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0061.279] CoTaskMemFree (pv=0xa692f0) [0061.279] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14cf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0061.279] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0061.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14d490) returned 1 [0061.279] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14d570 | out: lpFileInformation=0x14d570*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d450) returned 1 [0061.279] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14ced0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0061.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14d3b0) returned 1 [0061.280] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.280] GetFileType (hFile=0x270) returned 0x1 [0061.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d320) returned 1 [0061.280] GetFileType (hFile=0x270) returned 0x1 [0061.280] ReadFile (in: hFile=0x270, lpBuffer=0x2141f40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14d488, lpOverlapped=0x0 | out: lpBuffer=0x2141f40*, lpNumberOfBytesRead=0x14d488*=0x1, lpOverlapped=0x0) returned 1 [0061.280] ReadFile (in: hFile=0x270, lpBuffer=0x2141f40, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14d488, lpOverlapped=0x0 | out: lpBuffer=0x2141f40*, lpNumberOfBytesRead=0x14d488*=0x0, lpOverlapped=0x0) returned 1 [0061.280] CloseHandle (hObject=0x270) returned 1 [0061.281] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0061.281] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0061.281] CoTaskMemFree (pv=0xa692f0) [0061.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14cf00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0061.281] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14d050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0061.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14d490) returned 1 [0061.282] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14d570 | out: lpFileInformation=0x14d570*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0061.282] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d450) returned 1 [0061.282] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14ce90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0061.282] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14d370) returned 1 [0061.282] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.283] GetFileType (hFile=0x270) returned 0x1 [0061.283] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d2e0) returned 1 [0061.283] GetFileType (hFile=0x270) returned 0x1 [0061.283] WriteFile (in: hFile=0x270, lpBuffer=0x2145290*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x14d3b8, lpOverlapped=0x0 | out: lpBuffer=0x2145290*, lpNumberOfBytesWritten=0x14d3b8*=0x1, lpOverlapped=0x0) returned 1 [0061.284] CloseHandle (hObject=0x270) returned 1 [0061.285] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.285] AdjustWindowRectEx (in: lpRect=0x14d328, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d328) returned 1 [0061.285] SelectObject (hdc=0x8010893, h=0x200a0899) returned 0xb0a087e [0061.285] DrawTextExW (in: hdc=0x8010893, lpchText="4:59", cchText=4, lprc=0x14d298, format=0x2400, lpdtp=0x2146308 | out: lpchText="4:59", lprc=0x14d298) returned 20 [0061.285] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.285] AdjustWindowRectEx (in: lpRect=0x14d398, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d398) returned 1 [0061.285] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0061.285] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.286] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0061.286] SelectObject (hdc=0x8010893, h=0xb0a087e) returned 0x200a0899 [0061.286] DrawTextExW (in: hdc=0x8010893, lpchText="114 Files\r\nEncrypted", cchText=20, lprc=0x14d9e8, format=0x2400, lpdtp=0x2146510 | out: lpchText="114 Files\r\nEncrypted", lprc=0x14d9e8) returned 26 [0061.286] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0061.286] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0061.286] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0061.286] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0061.286] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0061.286] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0061.286] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\Yva2 GVzS.jpg", nBufferLength=0x105, lpBuffer=0x14d6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\Yva2 GVzS.jpg", lpFilePart=0x0) returned 0x58 [0061.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14db80) returned 1 [0061.286] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\Yva2 GVzS.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\zjv2v 97\\yva2 gvzs.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.286] GetFileType (hFile=0x270) returned 0x1 [0061.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14daf0) returned 1 [0061.286] GetFileType (hFile=0x270) returned 0x1 [0061.286] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14dd18 | out: lpFileSizeHigh=0x14dd18*=0x0) returned 0xc874 [0061.286] ReadFile (in: hFile=0x270, lpBuffer=0x2146980, nNumberOfBytesToRead=0xc874, lpNumberOfBytesRead=0x14dc48, lpOverlapped=0x0 | out: lpBuffer=0x2146980*, lpNumberOfBytesRead=0x14dc48*=0xc874, lpOverlapped=0x0) returned 1 [0061.287] CloseHandle (hObject=0x270) returned 1 [0061.290] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\Yva2 GVzS.jpg", nBufferLength=0x105, lpBuffer=0x14d840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\Yva2 GVzS.jpg", lpFilePart=0x0) returned 0x58 [0061.290] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\Yva2 GVzS.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\zjv2v 97\\yva2 gvzs.jpg")) returned 1 [0061.292] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\Yva2 GVzS.jpg.sad", nBufferLength=0x105, lpBuffer=0x14d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\Yva2 GVzS.jpg.sad", lpFilePart=0x0) returned 0x5c [0061.292] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dac0) returned 1 [0061.292] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\Yva2 GVzS.jpg.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\zjv2v 97\\yva2 gvzs.jpg.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.292] GetFileType (hFile=0x270) returned 0x1 [0061.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14da30) returned 1 [0061.292] GetFileType (hFile=0x270) returned 0x1 [0061.293] WriteFile (in: hFile=0x270, lpBuffer=0x2154aa0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x2154aa0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.294] WriteFile (in: hFile=0x270, lpBuffer=0x2154aa0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x2154aa0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.294] WriteFile (in: hFile=0x270, lpBuffer=0x2154aa0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x2154aa0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.294] WriteFile (in: hFile=0x270, lpBuffer=0x2154aa0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x2154aa0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.295] WriteFile (in: hFile=0x270, lpBuffer=0x2154aa0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x2154aa0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.295] WriteFile (in: hFile=0x270, lpBuffer=0x2154aa0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x2154aa0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.296] WriteFile (in: hFile=0x270, lpBuffer=0x2154aa0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x2154aa0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.296] WriteFile (in: hFile=0x270, lpBuffer=0x2154aa0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x2154aa0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.296] WriteFile (in: hFile=0x270, lpBuffer=0x2154aa0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x2154aa0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.297] WriteFile (in: hFile=0x270, lpBuffer=0x2154aa0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x2154aa0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.297] WriteFile (in: hFile=0x270, lpBuffer=0x2154aa0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x2154aa0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.297] WriteFile (in: hFile=0x270, lpBuffer=0x2154aa0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x2154aa0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.298] WriteFile (in: hFile=0x270, lpBuffer=0x2154aa0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x2154aa0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.298] WriteFile (in: hFile=0x270, lpBuffer=0x2154aa0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x2154aa0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.298] WriteFile (in: hFile=0x270, lpBuffer=0x2154aa0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x2154aa0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.299] WriteFile (in: hFile=0x270, lpBuffer=0x2154aa0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x2154aa0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.299] WriteFile (in: hFile=0x270, lpBuffer=0x2154aa0*, nNumberOfBytesToWrite=0xb48, lpNumberOfBytesWritten=0x14db08, lpOverlapped=0x0 | out: lpBuffer=0x2154aa0*, lpNumberOfBytesWritten=0x14db08*=0xb48, lpOverlapped=0x0) returned 1 [0061.299] CloseHandle (hObject=0x270) returned 1 [0061.301] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0061.301] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0061.301] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.301] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0061.301] DrawTextExW (in: hdc=0x8010893, lpchText="115 Files\r\nEncrypted", cchText=20, lprc=0x14d9e8, format=0x2400, lpdtp=0x2155cc8 | out: lpchText="115 Files\r\nEncrypted", lprc=0x14d9e8) returned 26 [0061.301] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0061.301] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0061.301] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0061.301] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0061.301] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0061.301] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0061.302] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\yYBVA.png", nBufferLength=0x105, lpBuffer=0x14d6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\yYBVA.png", lpFilePart=0x0) returned 0x54 [0061.302] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14db80) returned 1 [0061.302] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\yYBVA.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\zjv2v 97\\yybva.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.302] GetFileType (hFile=0x270) returned 0x1 [0061.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14daf0) returned 1 [0061.302] GetFileType (hFile=0x270) returned 0x1 [0061.302] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14dd18 | out: lpFileSizeHigh=0x14dd18*=0x0) returned 0x6e7 [0061.302] ReadFile (in: hFile=0x270, lpBuffer=0x2156820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14dc48, lpOverlapped=0x0 | out: lpBuffer=0x2156820*, lpNumberOfBytesRead=0x14dc48*=0x6e7, lpOverlapped=0x0) returned 1 [0061.303] CloseHandle (hObject=0x270) returned 1 [0061.303] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\yYBVA.png", nBufferLength=0x105, lpBuffer=0x14d840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\yYBVA.png", lpFilePart=0x0) returned 0x54 [0061.303] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\yYBVA.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\zjv2v 97\\yybva.png")) returned 1 [0061.305] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\yYBVA.png.sad", nBufferLength=0x105, lpBuffer=0x14d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\yYBVA.png.sad", lpFilePart=0x0) returned 0x58 [0061.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dac0) returned 1 [0061.305] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\yYBVA.png.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\zjv2v 97\\yybva.png.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.305] GetFileType (hFile=0x270) returned 0x1 [0061.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14da30) returned 1 [0061.305] GetFileType (hFile=0x270) returned 0x1 [0061.305] WriteFile (in: hFile=0x270, lpBuffer=0x215a330*, nNumberOfBytesToWrite=0x934, lpNumberOfBytesWritten=0x14db08, lpOverlapped=0x0 | out: lpBuffer=0x215a330*, lpNumberOfBytesWritten=0x14db08*=0x934, lpOverlapped=0x0) returned 1 [0061.306] CloseHandle (hObject=0x270) returned 1 [0061.308] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0061.308] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0061.308] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.308] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0061.308] DrawTextExW (in: hdc=0x8010893, lpchText="116 Files\r\nEncrypted", cchText=20, lprc=0x14d9e8, format=0x2400, lpdtp=0x215b530 | out: lpchText="116 Files\r\nEncrypted", lprc=0x14d9e8) returned 26 [0061.308] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0061.308] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0061.308] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0061.308] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0061.308] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0061.308] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0061.308] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\ZHlUFOiYUqfaFsKkHBs.gif", nBufferLength=0x105, lpBuffer=0x14d6a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\ZHlUFOiYUqfaFsKkHBs.gif", lpFilePart=0x0) returned 0x62 [0061.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14db80) returned 1 [0061.309] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\ZHlUFOiYUqfaFsKkHBs.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\zjv2v 97\\zhlufoiyuqfafskkhbs.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.309] GetFileType (hFile=0x270) returned 0x1 [0061.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14daf0) returned 1 [0061.309] GetFileType (hFile=0x270) returned 0x1 [0061.309] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14dd18 | out: lpFileSizeHigh=0x14dd18*=0x0) returned 0x15c94 [0061.309] ReadFile (in: hFile=0x270, lpBuffer=0x1217f930, nNumberOfBytesToRead=0x15c94, lpNumberOfBytesRead=0x14dc48, lpOverlapped=0x0 | out: lpBuffer=0x1217f930*, lpNumberOfBytesRead=0x14dc48*=0x15c94, lpOverlapped=0x0) returned 1 [0061.311] CloseHandle (hObject=0x270) returned 1 [0061.314] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\ZHlUFOiYUqfaFsKkHBs.gif", nBufferLength=0x105, lpBuffer=0x14d840, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\ZHlUFOiYUqfaFsKkHBs.gif", lpFilePart=0x0) returned 0x62 [0061.314] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\ZHlUFOiYUqfaFsKkHBs.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\zjv2v 97\\zhlufoiyuqfafskkhbs.gif")) returned 1 [0061.316] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\ZHlUFOiYUqfaFsKkHBs.gif.sad", nBufferLength=0x105, lpBuffer=0x14d5e0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\ZHlUFOiYUqfaFsKkHBs.gif.sad", lpFilePart=0x0) returned 0x66 [0061.316] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dac0) returned 1 [0061.316] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\ZHlUFOiYUqfaFsKkHBs.gif.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\mhsahqcvy43tp\\zjv2v 97\\zhlufoiyuqfafskkhbs.gif.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.317] GetFileType (hFile=0x270) returned 0x1 [0061.317] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14da30) returned 1 [0061.317] GetFileType (hFile=0x270) returned 0x1 [0061.317] WriteFile (in: hFile=0x270, lpBuffer=0x215d2a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215d2a0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.318] WriteFile (in: hFile=0x270, lpBuffer=0x215d2a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215d2a0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.318] WriteFile (in: hFile=0x270, lpBuffer=0x215d2a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215d2a0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.319] WriteFile (in: hFile=0x270, lpBuffer=0x215d2a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215d2a0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.319] WriteFile (in: hFile=0x270, lpBuffer=0x215d2a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215d2a0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.319] WriteFile (in: hFile=0x270, lpBuffer=0x215d2a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215d2a0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.320] WriteFile (in: hFile=0x270, lpBuffer=0x215d2a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215d2a0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.320] WriteFile (in: hFile=0x270, lpBuffer=0x215d2a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215d2a0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.320] WriteFile (in: hFile=0x270, lpBuffer=0x215d2a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215d2a0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.321] WriteFile (in: hFile=0x270, lpBuffer=0x215d2a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215d2a0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.321] WriteFile (in: hFile=0x270, lpBuffer=0x215d2a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215d2a0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.322] WriteFile (in: hFile=0x270, lpBuffer=0x215d2a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215d2a0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.322] WriteFile (in: hFile=0x270, lpBuffer=0x215d2a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215d2a0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.322] WriteFile (in: hFile=0x270, lpBuffer=0x215d2a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215d2a0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.323] WriteFile (in: hFile=0x270, lpBuffer=0x215d2a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215d2a0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.323] WriteFile (in: hFile=0x270, lpBuffer=0x215d2a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215d2a0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.323] WriteFile (in: hFile=0x270, lpBuffer=0x215d2a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215d2a0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.324] WriteFile (in: hFile=0x270, lpBuffer=0x215d2a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215d2a0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.324] WriteFile (in: hFile=0x270, lpBuffer=0x215d2a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215d2a0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.324] WriteFile (in: hFile=0x270, lpBuffer=0x215d2a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215d2a0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.325] WriteFile (in: hFile=0x270, lpBuffer=0x215d2a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215d2a0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.325] WriteFile (in: hFile=0x270, lpBuffer=0x215d2a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215d2a0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.325] WriteFile (in: hFile=0x270, lpBuffer=0x215d2a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215d2a0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.326] WriteFile (in: hFile=0x270, lpBuffer=0x215d2a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215d2a0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.326] WriteFile (in: hFile=0x270, lpBuffer=0x215d2a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215d2a0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.326] WriteFile (in: hFile=0x270, lpBuffer=0x215d2a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215d2a0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.327] WriteFile (in: hFile=0x270, lpBuffer=0x215d2a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215d2a0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.327] WriteFile (in: hFile=0x270, lpBuffer=0x215d2a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dba8, lpOverlapped=0x0 | out: lpBuffer=0x215d2a0*, lpNumberOfBytesWritten=0x14dba8*=0x1000, lpOverlapped=0x0) returned 1 [0061.328] WriteFile (in: hFile=0x270, lpBuffer=0x215d2a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14db28, lpOverlapped=0x0 | out: lpBuffer=0x215d2a0*, lpNumberOfBytesWritten=0x14db28*=0x1000, lpOverlapped=0x0) returned 1 [0061.328] WriteFile (in: hFile=0x270, lpBuffer=0x215d2a0*, nNumberOfBytesToWrite=0xc8, lpNumberOfBytesWritten=0x14db08, lpOverlapped=0x0 | out: lpBuffer=0x215d2a0*, lpNumberOfBytesWritten=0x14db08*=0xc8, lpOverlapped=0x0) returned 1 [0061.328] CloseHandle (hObject=0x270) returned 1 [0061.330] GetCurrentActCtx (in: lphActCtx=0x14dd10 | out: lphActCtx=0x14dd10*=0xa52648) returned 1 [0061.330] PeekMessageW (in: lpMsg=0x14dc60, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dc60) returned 0 [0061.330] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.330] AdjustWindowRectEx (in: lpRect=0x14da78, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da78) returned 1 [0061.330] DrawTextExW (in: hdc=0x8010893, lpchText="117 Files\r\nEncrypted", cchText=20, lprc=0x14d9e8, format=0x2400, lpdtp=0x215e4a0 | out: lpchText="117 Files\r\nEncrypted", lprc=0x14d9e8) returned 26 [0061.331] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0061.331] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0061.331] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0061.331] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0061.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14de60) returned 1 [0061.331] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97", lpFilePart=0x0) returned 0x4a [0061.331] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\", nBufferLength=0x105, lpBuffer=0x14d8f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\", lpFilePart=0x0) returned 0x4b [0061.331] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\mhsaHQcVy43tP\\zjV2v 97\\*", lpFindFileData=0x14db00 | out: lpFindFileData=0x14db00) returned 0xa748e0 [0061.331] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0061.331] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0061.331] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0061.332] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0061.332] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0061.332] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0061.332] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 1 [0061.332] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14db50 | out: lpFindFileData=0x14db50) returned 0 [0061.333] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0061.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14ddb0) returned 1 [0061.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd70) returned 1 [0061.333] GetCurrentActCtx (in: lphActCtx=0x14ded0 | out: lphActCtx=0x14ded0*=0xa52648) returned 1 [0061.333] PeekMessageW (in: lpMsg=0x14de20, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de20) returned 0 [0061.333] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.333] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.333] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.333] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.333] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.333] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.333] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.333] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.333] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.333] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x57 [0061.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dd90) returned 1 [0061.333] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\qfi3awk0eomojf\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.334] GetFileType (hFile=0x270) returned 0x1 [0061.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd00) returned 1 [0061.334] GetFileType (hFile=0x270) returned 0x1 [0061.334] WriteFile (in: hFile=0x270, lpBuffer=0x2161e18*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x14ddd8, lpOverlapped=0x0 | out: lpBuffer=0x2161e18*, lpNumberOfBytesWritten=0x14ddd8*=0x119, lpOverlapped=0x0) returned 1 [0061.335] CloseHandle (hObject=0x270) returned 1 [0061.335] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.335] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14df70) returned 1 [0061.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf", lpFilePart=0x0) returned 0x42 [0061.335] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\", nBufferLength=0x105, lpBuffer=0x14da00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\", lpFilePart=0x0) returned 0x43 [0061.335] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\*", lpFindFileData=0x14dc10 | out: lpFindFileData=0x14dc10) returned 0xa748e0 [0061.336] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.336] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.336] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.336] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.336] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.336] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.336] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.337] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.337] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 0 [0061.337] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0061.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dec0) returned 1 [0061.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de80) returned 1 [0061.337] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.337] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.337] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0061.337] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0061.337] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\-eo9UKg5GOZe9YZ7z.gif", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\-eo9UKg5GOZe9YZ7z.gif", lpFilePart=0x0) returned 0x58 [0061.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0061.337] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\-eo9UKg5GOZe9YZ7z.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\qfi3awk0eomojf\\-eo9ukg5goze9yz7z.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.338] GetFileType (hFile=0x270) returned 0x1 [0061.338] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0061.338] GetFileType (hFile=0x270) returned 0x1 [0061.338] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x8dc0 [0061.338] ReadFile (in: hFile=0x270, lpBuffer=0x21650b0, nNumberOfBytesToRead=0x8dc0, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x21650b0*, lpNumberOfBytesRead=0x14dd58*=0x8dc0, lpOverlapped=0x0) returned 1 [0061.339] CloseHandle (hObject=0x270) returned 1 [0061.341] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\-eo9UKg5GOZe9YZ7z.gif", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\-eo9UKg5GOZe9YZ7z.gif", lpFilePart=0x0) returned 0x58 [0061.341] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\-eo9UKg5GOZe9YZ7z.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\qfi3awk0eomojf\\-eo9ukg5goze9yz7z.gif")) returned 1 [0061.342] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\-eo9UKg5GOZe9YZ7z.gif.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\-eo9UKg5GOZe9YZ7z.gif.sad", lpFilePart=0x0) returned 0x5c [0061.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0061.342] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\-eo9UKg5GOZe9YZ7z.gif.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\qfi3awk0eomojf\\-eo9ukg5goze9yz7z.gif.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.343] GetFileType (hFile=0x270) returned 0x1 [0061.343] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0061.343] GetFileType (hFile=0x270) returned 0x1 [0061.343] WriteFile (in: hFile=0x270, lpBuffer=0x216f728*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x216f728*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.344] WriteFile (in: hFile=0x270, lpBuffer=0x216f728*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x216f728*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.345] WriteFile (in: hFile=0x270, lpBuffer=0x216f728*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x216f728*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.345] WriteFile (in: hFile=0x270, lpBuffer=0x216f728*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x216f728*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.345] WriteFile (in: hFile=0x270, lpBuffer=0x216f728*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x216f728*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.346] WriteFile (in: hFile=0x270, lpBuffer=0x216f728*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x216f728*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.346] WriteFile (in: hFile=0x270, lpBuffer=0x216f728*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x216f728*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.346] WriteFile (in: hFile=0x270, lpBuffer=0x216f728*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x216f728*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.347] WriteFile (in: hFile=0x270, lpBuffer=0x216f728*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x216f728*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.347] WriteFile (in: hFile=0x270, lpBuffer=0x216f728*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x216f728*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.347] WriteFile (in: hFile=0x270, lpBuffer=0x216f728*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x216f728*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.348] WriteFile (in: hFile=0x270, lpBuffer=0x216f728*, nNumberOfBytesToWrite=0xd00, lpNumberOfBytesWritten=0x14dc18, lpOverlapped=0x0 | out: lpBuffer=0x216f728*, lpNumberOfBytesWritten=0x14dc18*=0xd00, lpOverlapped=0x0) returned 1 [0061.348] CloseHandle (hObject=0x270) returned 1 [0061.349] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0061.349] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0061.349] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.349] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0061.349] DrawTextExW (in: hdc=0x8010893, lpchText="118 Files\r\nEncrypted", cchText=20, lprc=0x14daf8, format=0x2400, lpdtp=0x2170928 | out: lpchText="118 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0061.350] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.350] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.350] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.350] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.350] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0061.350] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0061.350] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\0YWYhCdS.png", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\0YWYhCdS.png", lpFilePart=0x0) returned 0x4f [0061.350] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0061.350] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\0YWYhCdS.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\qfi3awk0eomojf\\0ywyhcds.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.350] GetFileType (hFile=0x270) returned 0x1 [0061.350] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0061.350] GetFileType (hFile=0x270) returned 0x1 [0061.350] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x67b0 [0061.350] ReadFile (in: hFile=0x270, lpBuffer=0x2170d80, nNumberOfBytesToRead=0x67b0, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x2170d80*, lpNumberOfBytesRead=0x14dd58*=0x67b0, lpOverlapped=0x0) returned 1 [0061.351] CloseHandle (hObject=0x270) returned 1 [0061.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\0YWYhCdS.png", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\0YWYhCdS.png", lpFilePart=0x0) returned 0x4f [0061.351] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\0YWYhCdS.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\qfi3awk0eomojf\\0ywyhcds.png")) returned 1 [0061.353] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\0YWYhCdS.png.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\0YWYhCdS.png.sad", lpFilePart=0x0) returned 0x53 [0061.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0061.353] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\0YWYhCdS.png.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\qfi3awk0eomojf\\0ywyhcds.png.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.353] GetFileType (hFile=0x270) returned 0x1 [0061.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0061.353] GetFileType (hFile=0x270) returned 0x1 [0061.354] WriteFile (in: hFile=0x270, lpBuffer=0x218a230*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x218a230*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.355] WriteFile (in: hFile=0x270, lpBuffer=0x218a230*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x218a230*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.355] WriteFile (in: hFile=0x270, lpBuffer=0x218a230*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x218a230*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.355] WriteFile (in: hFile=0x270, lpBuffer=0x218a230*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x218a230*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.356] WriteFile (in: hFile=0x270, lpBuffer=0x218a230*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x218a230*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.356] WriteFile (in: hFile=0x270, lpBuffer=0x218a230*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x218a230*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.356] WriteFile (in: hFile=0x270, lpBuffer=0x218a230*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x218a230*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.356] WriteFile (in: hFile=0x270, lpBuffer=0x218a230*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x218a230*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.356] WriteFile (in: hFile=0x270, lpBuffer=0x218a230*, nNumberOfBytesToWrite=0xa40, lpNumberOfBytesWritten=0x14dc18, lpOverlapped=0x0 | out: lpBuffer=0x218a230*, lpNumberOfBytesWritten=0x14dc18*=0xa40, lpOverlapped=0x0) returned 1 [0061.357] CloseHandle (hObject=0x270) returned 1 [0061.358] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0061.358] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0061.358] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.358] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0061.358] DrawTextExW (in: hdc=0x8010893, lpchText="119 Files\r\nEncrypted", cchText=20, lprc=0x14daf8, format=0x2400, lpdtp=0x218b430 | out: lpchText="119 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0061.358] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.358] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.358] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.358] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.358] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0061.358] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0061.358] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\bRmDheJ1.bmp", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\bRmDheJ1.bmp", lpFilePart=0x0) returned 0x4f [0061.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0061.359] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\bRmDheJ1.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\qfi3awk0eomojf\\brmdhej1.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.359] GetFileType (hFile=0x270) returned 0x1 [0061.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0061.359] GetFileType (hFile=0x270) returned 0x1 [0061.359] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x60dc [0061.359] ReadFile (in: hFile=0x270, lpBuffer=0x218b888, nNumberOfBytesToRead=0x60dc, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x218b888*, lpNumberOfBytesRead=0x14dd58*=0x60dc, lpOverlapped=0x0) returned 1 [0061.360] CloseHandle (hObject=0x270) returned 1 [0061.360] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\bRmDheJ1.bmp", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\bRmDheJ1.bmp", lpFilePart=0x0) returned 0x4f [0061.360] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\bRmDheJ1.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\qfi3awk0eomojf\\brmdhej1.bmp")) returned 1 [0061.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\bRmDheJ1.bmp.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\bRmDheJ1.bmp.sad", lpFilePart=0x0) returned 0x53 [0061.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0061.362] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\bRmDheJ1.bmp.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\qfi3awk0eomojf\\brmdhej1.bmp.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.362] GetFileType (hFile=0x270) returned 0x1 [0061.362] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0061.362] GetFileType (hFile=0x270) returned 0x1 [0061.362] WriteFile (in: hFile=0x270, lpBuffer=0x21a3438*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21a3438*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.363] WriteFile (in: hFile=0x270, lpBuffer=0x21a3438*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21a3438*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.363] WriteFile (in: hFile=0x270, lpBuffer=0x21a3438*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21a3438*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.364] WriteFile (in: hFile=0x270, lpBuffer=0x21a3438*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21a3438*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.364] WriteFile (in: hFile=0x270, lpBuffer=0x21a3438*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21a3438*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.364] WriteFile (in: hFile=0x270, lpBuffer=0x21a3438*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21a3438*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.364] WriteFile (in: hFile=0x270, lpBuffer=0x21a3438*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21a3438*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.364] WriteFile (in: hFile=0x270, lpBuffer=0x21a3438*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dc38, lpOverlapped=0x0 | out: lpBuffer=0x21a3438*, lpNumberOfBytesWritten=0x14dc38*=0x1000, lpOverlapped=0x0) returned 1 [0061.365] WriteFile (in: hFile=0x270, lpBuffer=0x21a3438*, nNumberOfBytesToWrite=0x128, lpNumberOfBytesWritten=0x14dc18, lpOverlapped=0x0 | out: lpBuffer=0x21a3438*, lpNumberOfBytesWritten=0x14dc18*=0x128, lpOverlapped=0x0) returned 1 [0061.365] CloseHandle (hObject=0x270) returned 1 [0061.366] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0061.366] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0061.366] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.366] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0061.366] DrawTextExW (in: hdc=0x8010893, lpchText="120 Files\r\nEncrypted", cchText=20, lprc=0x14daf8, format=0x2400, lpdtp=0x21a4638 | out: lpchText="120 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0061.366] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.367] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.367] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.367] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.367] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0061.367] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0061.367] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\LIaW13DZCWxMjwUFgD8Y.jpg", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\LIaW13DZCWxMjwUFgD8Y.jpg", lpFilePart=0x0) returned 0x5b [0061.367] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0061.367] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\LIaW13DZCWxMjwUFgD8Y.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\qfi3awk0eomojf\\liaw13dzcwxmjwufgd8y.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.367] GetFileType (hFile=0x270) returned 0x1 [0061.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0061.367] GetFileType (hFile=0x270) returned 0x1 [0061.367] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x7cdb [0061.367] ReadFile (in: hFile=0x270, lpBuffer=0x21a4ad8, nNumberOfBytesToRead=0x7cdb, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x21a4ad8*, lpNumberOfBytesRead=0x14dd58*=0x7cdb, lpOverlapped=0x0) returned 1 [0061.368] CloseHandle (hObject=0x270) returned 1 [0061.369] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\LIaW13DZCWxMjwUFgD8Y.jpg", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\LIaW13DZCWxMjwUFgD8Y.jpg", lpFilePart=0x0) returned 0x5b [0061.369] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\LIaW13DZCWxMjwUFgD8Y.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\qfi3awk0eomojf\\liaw13dzcwxmjwufgd8y.jpg")) returned 1 [0061.371] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\LIaW13DZCWxMjwUFgD8Y.jpg.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\LIaW13DZCWxMjwUFgD8Y.jpg.sad", lpFilePart=0x0) returned 0x5f [0061.371] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0061.371] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\LIaW13DZCWxMjwUFgD8Y.jpg.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\qfi3awk0eomojf\\liaw13dzcwxmjwufgd8y.jpg.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.371] GetFileType (hFile=0x270) returned 0x1 [0061.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0061.371] GetFileType (hFile=0x270) returned 0x1 [0061.371] WriteFile (in: hFile=0x270, lpBuffer=0x21ae078*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21ae078*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.372] WriteFile (in: hFile=0x270, lpBuffer=0x21ae078*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21ae078*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.373] WriteFile (in: hFile=0x270, lpBuffer=0x21ae078*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21ae078*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.373] WriteFile (in: hFile=0x270, lpBuffer=0x21ae078*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21ae078*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.373] WriteFile (in: hFile=0x270, lpBuffer=0x21ae078*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21ae078*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.373] WriteFile (in: hFile=0x270, lpBuffer=0x21ae078*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21ae078*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.373] WriteFile (in: hFile=0x270, lpBuffer=0x21ae078*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21ae078*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.374] WriteFile (in: hFile=0x270, lpBuffer=0x21ae078*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21ae078*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.374] WriteFile (in: hFile=0x270, lpBuffer=0x21ae078*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21ae078*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.374] WriteFile (in: hFile=0x270, lpBuffer=0x21ae078*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14dcb8, lpOverlapped=0x0 | out: lpBuffer=0x21ae078*, lpNumberOfBytesWritten=0x14dcb8*=0x1000, lpOverlapped=0x0) returned 1 [0061.374] WriteFile (in: hFile=0x270, lpBuffer=0x21ae078*, nNumberOfBytesToWrite=0x67c, lpNumberOfBytesWritten=0x14dc18, lpOverlapped=0x0 | out: lpBuffer=0x21ae078*, lpNumberOfBytesWritten=0x14dc18*=0x67c, lpOverlapped=0x0) returned 1 [0061.374] CloseHandle (hObject=0x270) returned 1 [0061.375] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0061.375] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0061.376] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.376] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0061.376] DrawTextExW (in: hdc=0x8010893, lpchText="121 Files\r\nEncrypted", cchText=20, lprc=0x14daf8, format=0x2400, lpdtp=0x21af278 | out: lpchText="121 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0061.376] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.376] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.376] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.376] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.376] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0061.376] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0061.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\LkrqQJget.bmp", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\LkrqQJget.bmp", lpFilePart=0x0) returned 0x50 [0061.376] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0061.376] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\LkrqQJget.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\qfi3awk0eomojf\\lkrqqjget.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.376] GetFileType (hFile=0x270) returned 0x1 [0061.376] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0061.377] GetFileType (hFile=0x270) returned 0x1 [0061.377] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x169f5 [0061.377] ReadFile (in: hFile=0x270, lpBuffer=0x121fbf48, nNumberOfBytesToRead=0x169f5, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x121fbf48*, lpNumberOfBytesRead=0x14dd58*=0x169f5, lpOverlapped=0x0) returned 1 [0061.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\LkrqQJget.bmp", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\LkrqQJget.bmp", lpFilePart=0x0) returned 0x50 [0061.383] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\LkrqQJget.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\qfi3awk0eomojf\\lkrqqjget.bmp")) returned 1 [0061.386] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\LkrqQJget.bmp.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\LkrqQJget.bmp.sad", lpFilePart=0x0) returned 0x54 [0061.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0061.386] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\LkrqQJget.bmp.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\qfi3awk0eomojf\\lkrqqjget.bmp.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0061.391] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0061.391] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0061.392] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.392] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0061.392] DrawTextExW (in: hdc=0x8010893, lpchText="122 Files\r\nEncrypted", cchText=20, lprc=0x14daf8, format=0x2400, lpdtp=0x21b2138 | out: lpchText="122 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0061.392] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.392] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.392] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.392] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.392] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.392] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.392] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.392] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.392] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0061.392] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0061.392] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\_UwXzks5.gif", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\_UwXzks5.gif", lpFilePart=0x0) returned 0x4f [0061.392] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0061.392] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\_UwXzks5.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\qfi3awk0eomojf\\_uwxzks5.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0061.393] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0xa4df [0061.393] ReadFile (in: hFile=0x270, lpBuffer=0x21b2798, nNumberOfBytesToRead=0xa4df, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x21b2798*, lpNumberOfBytesRead=0x14dd58*=0xa4df, lpOverlapped=0x0) returned 1 [0061.396] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\_UwXzks5.gif", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\_UwXzks5.gif", lpFilePart=0x0) returned 0x4f [0061.396] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\_UwXzks5.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\qfi3awk0eomojf\\_uwxzks5.gif")) returned 1 [0061.398] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\_UwXzks5.gif.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\_UwXzks5.gif.sad", lpFilePart=0x0) returned 0x53 [0061.398] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0061.398] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\_UwXzks5.gif.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\qfi3awk0eomojf\\_uwxzks5.gif.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.398] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0061.401] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0061.401] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0061.401] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.401] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0061.401] DrawTextExW (in: hdc=0x8010893, lpchText="123 Files\r\nEncrypted", cchText=20, lprc=0x14daf8, format=0x2400, lpdtp=0x21bf6d8 | out: lpchText="123 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0061.402] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.402] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.402] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.402] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14df70) returned 1 [0061.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf", lpFilePart=0x0) returned 0x42 [0061.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\", nBufferLength=0x105, lpBuffer=0x14da00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\", lpFilePart=0x0) returned 0x43 [0061.402] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\QFi3AwK0EOmojf\\*", lpFindFileData=0x14dc10 | out: lpFindFileData=0x14dc10) returned 0xa748e0 [0061.402] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.402] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.403] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.403] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.403] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.403] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.403] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.404] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.404] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 0 [0061.404] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0061.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dec0) returned 1 [0061.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de80) returned 1 [0061.404] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.404] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.404] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.404] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.404] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.404] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.404] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.404] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.404] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x58 [0061.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dd90) returned 1 [0061.405] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\yitxh2ju5vd145w\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd00) returned 1 [0061.406] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.406] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14df70) returned 1 [0061.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w", lpFilePart=0x0) returned 0x43 [0061.406] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\", nBufferLength=0x105, lpBuffer=0x14da00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\", lpFilePart=0x0) returned 0x44 [0061.406] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\*", lpFindFileData=0x14dc10 | out: lpFindFileData=0x14dc10) returned 0xa748e0 [0061.406] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.406] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.407] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.407] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.407] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.407] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.407] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.407] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.407] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.408] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.408] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 0 [0061.408] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0061.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dec0) returned 1 [0061.408] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de80) returned 1 [0061.408] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.408] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.408] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0061.408] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0061.408] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\0te1Xz_2URt8tltNFlrH.gif", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\0te1Xz_2URt8tltNFlrH.gif", lpFilePart=0x0) returned 0x5c [0061.408] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0061.408] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\0te1Xz_2URt8tltNFlrH.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\yitxh2ju5vd145w\\0te1xz_2urt8tltnflrh.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0061.409] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0xff1b [0061.409] ReadFile (in: hFile=0x270, lpBuffer=0x21c6840, nNumberOfBytesToRead=0xff1b, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x21c6840*, lpNumberOfBytesRead=0x14dd58*=0xff1b, lpOverlapped=0x0) returned 1 [0061.412] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\0te1Xz_2URt8tltNFlrH.gif", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\0te1Xz_2URt8tltNFlrH.gif", lpFilePart=0x0) returned 0x5c [0061.412] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\0te1Xz_2URt8tltNFlrH.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\yitxh2ju5vd145w\\0te1xz_2urt8tltnflrh.gif")) returned 1 [0061.414] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\0te1Xz_2URt8tltNFlrH.gif.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\0te1Xz_2URt8tltNFlrH.gif.sad", lpFilePart=0x0) returned 0x60 [0061.414] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0061.414] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\0te1Xz_2URt8tltNFlrH.gif.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\yitxh2ju5vd145w\\0te1xz_2urt8tltnflrh.gif.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.414] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0061.417] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0061.417] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0061.418] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.418] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0061.418] DrawTextExW (in: hdc=0x8010893, lpchText="124 Files\r\nEncrypted", cchText=20, lprc=0x14daf8, format=0x2400, lpdtp=0x21d9238 | out: lpchText="124 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0061.418] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.418] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.418] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.418] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.418] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0061.418] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0061.418] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\8CeXqdTg.png", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\8CeXqdTg.png", lpFilePart=0x0) returned 0x50 [0061.418] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0061.418] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\8CeXqdTg.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\yitxh2ju5vd145w\\8cexqdtg.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.418] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0061.419] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x67a7 [0061.419] ReadFile (in: hFile=0x270, lpBuffer=0x21d9698, nNumberOfBytesToRead=0x67a7, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x21d9698*, lpNumberOfBytesRead=0x14dd58*=0x67a7, lpOverlapped=0x0) returned 1 [0061.420] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\8CeXqdTg.png", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\8CeXqdTg.png", lpFilePart=0x0) returned 0x50 [0061.420] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\8CeXqdTg.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\yitxh2ju5vd145w\\8cexqdtg.png")) returned 1 [0061.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\8CeXqdTg.png.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\8CeXqdTg.png.sad", lpFilePart=0x0) returned 0x54 [0061.422] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0061.422] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\8CeXqdTg.png.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\yitxh2ju5vd145w\\8cexqdtg.png.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.422] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0061.424] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0061.424] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0061.424] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.424] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0061.424] DrawTextExW (in: hdc=0x8010893, lpchText="125 Files\r\nEncrypted", cchText=20, lprc=0x14daf8, format=0x2400, lpdtp=0x21f3d40 | out: lpchText="125 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0061.424] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.424] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.424] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.424] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.424] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0061.424] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0061.424] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\gMgYrsAdGF6XOwRNuYZ.bmp", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\gMgYrsAdGF6XOwRNuYZ.bmp", lpFilePart=0x0) returned 0x5b [0061.424] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0061.424] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\gMgYrsAdGF6XOwRNuYZ.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\yitxh2ju5vd145w\\gmgyrsadgf6xowrnuyz.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.425] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0061.425] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0xd1c9 [0061.425] ReadFile (in: hFile=0x270, lpBuffer=0x21f41d0, nNumberOfBytesToRead=0xd1c9, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x21f41d0*, lpNumberOfBytesRead=0x14dd58*=0xd1c9, lpOverlapped=0x0) returned 1 [0061.427] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\gMgYrsAdGF6XOwRNuYZ.bmp", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\gMgYrsAdGF6XOwRNuYZ.bmp", lpFilePart=0x0) returned 0x5b [0061.427] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\gMgYrsAdGF6XOwRNuYZ.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\yitxh2ju5vd145w\\gmgyrsadgf6xowrnuyz.bmp")) returned 1 [0061.429] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\gMgYrsAdGF6XOwRNuYZ.bmp.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\gMgYrsAdGF6XOwRNuYZ.bmp.sad", lpFilePart=0x0) returned 0x5f [0061.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0061.429] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\gMgYrsAdGF6XOwRNuYZ.bmp.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\yitxh2ju5vd145w\\gmgyrsadgf6xowrnuyz.bmp.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.430] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0061.432] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0061.432] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0061.432] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.432] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0061.432] DrawTextExW (in: hdc=0x8010893, lpchText="126 Files\r\nEncrypted", cchText=20, lprc=0x14daf8, format=0x2400, lpdtp=0x2203e58 | out: lpchText="126 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0061.432] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.433] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.433] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.433] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.433] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0061.433] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0061.433] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\JY35 IIMOJiJ Td1fvz.jpg", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\JY35 IIMOJiJ Td1fvz.jpg", lpFilePart=0x0) returned 0x5b [0061.433] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0061.433] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\JY35 IIMOJiJ Td1fvz.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\yitxh2ju5vd145w\\jy35 iimojij td1fvz.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0061.433] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0xa05f [0061.433] ReadFile (in: hFile=0x270, lpBuffer=0x22042e8, nNumberOfBytesToRead=0xa05f, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x22042e8*, lpNumberOfBytesRead=0x14dd58*=0xa05f, lpOverlapped=0x0) returned 1 [0061.435] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\JY35 IIMOJiJ Td1fvz.jpg", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\JY35 IIMOJiJ Td1fvz.jpg", lpFilePart=0x0) returned 0x5b [0061.435] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\JY35 IIMOJiJ Td1fvz.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\yitxh2ju5vd145w\\jy35 iimojij td1fvz.jpg")) returned 1 [0061.437] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\JY35 IIMOJiJ Td1fvz.jpg.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\JY35 IIMOJiJ Td1fvz.jpg.sad", lpFilePart=0x0) returned 0x5f [0061.437] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0061.437] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\JY35 IIMOJiJ Td1fvz.jpg.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\yitxh2ju5vd145w\\jy35 iimojij td1fvz.jpg.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.437] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0061.439] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0061.439] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0061.440] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.440] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0061.440] DrawTextExW (in: hdc=0x8010893, lpchText="127 Files\r\nEncrypted", cchText=20, lprc=0x14daf8, format=0x2400, lpdtp=0x2210e00 | out: lpchText="127 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0061.440] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.440] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.440] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.440] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.440] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0061.440] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0061.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\KrappyOIit.bmp", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\KrappyOIit.bmp", lpFilePart=0x0) returned 0x52 [0061.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0061.440] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\KrappyOIit.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\yitxh2ju5vd145w\\krappyoiit.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0061.441] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x3782 [0061.441] ReadFile (in: hFile=0x270, lpBuffer=0x2211260, nNumberOfBytesToRead=0x3782, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x2211260*, lpNumberOfBytesRead=0x14dd58*=0x3782, lpOverlapped=0x0) returned 1 [0061.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\KrappyOIit.bmp", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\KrappyOIit.bmp", lpFilePart=0x0) returned 0x52 [0061.441] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\KrappyOIit.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\yitxh2ju5vd145w\\krappyoiit.bmp")) returned 1 [0061.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\KrappyOIit.bmp.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\KrappyOIit.bmp.sad", lpFilePart=0x0) returned 0x56 [0061.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0061.443] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\KrappyOIit.bmp.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\yitxh2ju5vd145w\\krappyoiit.bmp.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0061.445] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0061.445] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0061.445] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.445] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0061.445] DrawTextExW (in: hdc=0x8010893, lpchText="128 Files\r\nEncrypted", cchText=20, lprc=0x14daf8, format=0x2400, lpdtp=0x2220888 | out: lpchText="128 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0061.446] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.446] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.446] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.446] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.446] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0061.446] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0061.446] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\KyOrjb1igLRDh.gif", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\KyOrjb1igLRDh.gif", lpFilePart=0x0) returned 0x55 [0061.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0061.446] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\KyOrjb1igLRDh.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\yitxh2ju5vd145w\\kyorjb1iglrdh.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0061.446] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x599b [0061.446] ReadFile (in: hFile=0x270, lpBuffer=0x2220d00, nNumberOfBytesToRead=0x599b, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x2220d00*, lpNumberOfBytesRead=0x14dd58*=0x599b, lpOverlapped=0x0) returned 1 [0061.447] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\KyOrjb1igLRDh.gif", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\KyOrjb1igLRDh.gif", lpFilePart=0x0) returned 0x55 [0061.448] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\KyOrjb1igLRDh.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\yitxh2ju5vd145w\\kyorjb1iglrdh.gif")) returned 1 [0061.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\KyOrjb1igLRDh.gif.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\KyOrjb1igLRDh.gif.sad", lpFilePart=0x0) returned 0x59 [0061.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0061.450] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\KyOrjb1igLRDh.gif.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\yitxh2ju5vd145w\\kyorjb1iglrdh.gif.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0061.452] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0061.452] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0061.452] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.452] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0061.452] DrawTextExW (in: hdc=0x8010893, lpchText="129 Files\r\nEncrypted", cchText=20, lprc=0x14daf8, format=0x2400, lpdtp=0x2238050 | out: lpchText="129 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0061.452] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.452] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.452] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.452] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.452] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0061.452] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0061.452] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\ld4a4_.gif", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\ld4a4_.gif", lpFilePart=0x0) returned 0x4e [0061.453] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0061.453] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\ld4a4_.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\yitxh2ju5vd145w\\ld4a4_.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0061.453] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x5df [0061.453] ReadFile (in: hFile=0x270, lpBuffer=0x2238a90, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x2238a90*, lpNumberOfBytesRead=0x14dd58*=0x5df, lpOverlapped=0x0) returned 1 [0061.454] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\ld4a4_.gif", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\ld4a4_.gif", lpFilePart=0x0) returned 0x4e [0061.454] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\ld4a4_.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\yitxh2ju5vd145w\\ld4a4_.gif")) returned 1 [0061.469] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\ld4a4_.gif.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\ld4a4_.gif.sad", lpFilePart=0x0) returned 0x52 [0061.469] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0061.469] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\ld4a4_.gif.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\yitxh2ju5vd145w\\ld4a4_.gif.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.469] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0061.470] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0061.470] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0061.470] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.470] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0061.471] DrawTextExW (in: hdc=0x8010893, lpchText="130 Files\r\nEncrypted", cchText=20, lprc=0x14daf8, format=0x2400, lpdtp=0x223d4b0 | out: lpchText="130 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0061.471] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.471] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.471] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.471] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.471] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.471] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.471] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.471] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.471] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0061.471] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0061.471] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\sp84of.png", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\sp84of.png", lpFilePart=0x0) returned 0x4e [0061.471] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0061.471] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\sp84of.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\yitxh2ju5vd145w\\sp84of.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.471] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0061.471] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x7445 [0061.472] ReadFile (in: hFile=0x270, lpBuffer=0x223db00, nNumberOfBytesToRead=0x7445, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x223db00*, lpNumberOfBytesRead=0x14dd58*=0x7445, lpOverlapped=0x0) returned 1 [0061.473] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\sp84of.png", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\sp84of.png", lpFilePart=0x0) returned 0x4e [0061.473] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\sp84of.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\yitxh2ju5vd145w\\sp84of.png")) returned 1 [0061.474] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\sp84of.png.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\sp84of.png.sad", lpFilePart=0x0) returned 0x52 [0061.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0061.475] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\sp84of.png.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\uwvufnnwasdt\\yitxh2ju5vd145w\\sp84of.png.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0061.477] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0061.477] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0061.477] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.477] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0061.477] DrawTextExW (in: hdc=0x8010893, lpchText="131 Files\r\nEncrypted", cchText=20, lprc=0x14daf8, format=0x2400, lpdtp=0x225afd0 | out: lpchText="131 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0061.477] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.477] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.477] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.477] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14df70) returned 1 [0061.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w", lpFilePart=0x0) returned 0x43 [0061.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\", nBufferLength=0x105, lpBuffer=0x14da00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\", lpFilePart=0x0) returned 0x44 [0061.477] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UwVUfnnwASdt\\YITxh2Ju5vd145w\\*", lpFindFileData=0x14dc10 | out: lpFindFileData=0x14dc10) returned 0xa748e0 [0061.478] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.478] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.478] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.478] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.479] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.479] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.479] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.479] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.479] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.480] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0061.480] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 0 [0061.480] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0061.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dec0) returned 1 [0061.480] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de80) returned 1 [0061.480] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0061.480] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0061.480] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.480] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.481] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.481] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.481] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.481] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.481] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.481] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.481] GetCurrentActCtx (in: lphActCtx=0x14e310 | out: lphActCtx=0x14e310*=0xa52648) returned 1 [0061.481] PeekMessageW (in: lpMsg=0x14e260, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e260) returned 0 [0061.481] GetWindowTextLengthW (hWnd=0x3019e) returned 38 [0061.481] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x26 [0061.481] GetSystemMetrics (nIndex=42) returned 0 [0061.481] GetWindowTextW (in: hWnd=0x3019e, lpString=0x14e1b0, nMaxCount=39 | out: lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures") returned 38 [0061.481] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xd, wParam=0x27, lParam=0x14e1b0) returned 0x26 [0061.481] GetWindowTextLengthW (hWnd=0x3019e) returned 38 [0061.481] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x26 [0061.481] GetSystemMetrics (nIndex=42) returned 0 [0061.481] GetWindowTextW (in: hWnd=0x3019e, lpString=0x14e150, nMaxCount=39 | out: lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures") returned 38 [0061.481] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xd, wParam=0x27, lParam=0x14e150) returned 0x26 [0061.481] SetWindowTextW (hWnd=0x3019e, lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos") returned 1 [0061.481] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xc, wParam=0x0, lParam=0x2124bd4) returned 0x1 [0061.481] GetStockObject (i=5) returned 0x1900015 [0061.481] GetDlgItem (hDlg=0x301d2, nIDDlgItem=197022) returned 0x3019e [0061.481] SendMessageW (hWnd=0x3019e, Msg=0x202b, wParam=0x3019e, lParam=0x14da50) returned 0x0 [0061.481] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x202b, wParam=0x3019e, lParam=0x14da50) returned 0x0 [0061.482] GetWindowTextLengthW (hWnd=0x3019e) returned 36 [0061.482] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x24 [0061.482] GetSystemMetrics (nIndex=42) returned 0 [0061.482] GetWindowTextW (in: hWnd=0x3019e, lpString=0x14e020, nMaxCount=37 | out: lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos") returned 36 [0061.482] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xd, wParam=0x25, lParam=0x14e020) returned 0x24 [0061.482] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.482] AdjustWindowRectEx (in: lpRect=0x14e078, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e078) returned 1 [0061.482] DrawTextExW (in: hdc=0x8010893, lpchText="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", cchText=36, lprc=0x14dfe8, format=0x102400, lpdtp=0x225dc20 | out: lpchText="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lprc=0x14dfe8) returned 13 [0061.482] SetWindowPos (hWnd=0x3019e, hWndInsertAfter=0x0, X=12, Y=101, cx=209, cy=13, uFlags=0x16) returned 1 [0061.482] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x46, wParam=0x0, lParam=0x14e020) returned 0x0 [0061.482] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x83, wParam=0x1, lParam=0x14dff0) returned 0x0 [0061.483] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x47, wParam=0x0, lParam=0x14e020) returned 0x0 [0061.483] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x5, wParam=0x0, lParam=0xd00d1) returned 0x0 [0061.483] GetClientRect (in: hWnd=0x3019e, lpRect=0x14da50 | out: lpRect=0x14da50) returned 1 [0061.483] GetWindowRect (in: hWnd=0x3019e, lpRect=0x14da50 | out: lpRect=0x14da50) returned 1 [0061.483] GetParent (hWnd=0x3019e) returned 0x301d2 [0061.483] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301d2, lpPoints=0x14da50, cPoints=0x2 | out: lpPoints=0x14da50) returned 2097184000 [0061.483] InvalidateRect (hWnd=0x3019e, lpRect=0x0, bErase=1) returned 1 [0061.483] GetWindowTextLengthW (hWnd=0x3019e) returned 36 [0061.483] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x24 [0061.483] GetSystemMetrics (nIndex=42) returned 0 [0061.483] GetWindowTextW (in: hWnd=0x3019e, lpString=0x14d690, nMaxCount=37 | out: lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos") returned 36 [0061.483] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xd, wParam=0x25, lParam=0x14d690) returned 0x24 [0061.483] GetParent (hWnd=0x3019e) returned 0x301d2 [0061.483] InvalidateRect (hWnd=0x3019e, lpRect=0x0, bErase=1) returned 1 [0061.483] GetWindowTextLengthW (hWnd=0x301d2) returned 12 [0061.484] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0061.484] GetSystemMetrics (nIndex=42) returned 0 [0061.484] GetWindowTextW (in: hWnd=0x301d2, lpString=0x14dfd0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0061.484] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0xd, wParam=0xd, lParam=0x14dfd0) returned 0xc [0061.484] GetCurrentActCtx (in: lphActCtx=0x14e310 | out: lphActCtx=0x14e310*=0xa52648) returned 1 [0061.484] PeekMessageW (in: lpMsg=0x14e260, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e260) returned 0 [0061.484] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.484] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.484] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x39 [0061.484] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dfb0) returned 1 [0061.484] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.485] GetFileType (hFile=0x270) returned 0x1 [0061.485] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14df20) returned 1 [0061.485] GetFileType (hFile=0x270) returned 0x1 [0061.485] WriteFile (in: hFile=0x270, lpBuffer=0x225f810*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x14dff8, lpOverlapped=0x0 | out: lpBuffer=0x225f810*, lpNumberOfBytesWritten=0x14dff8*=0x119, lpOverlapped=0x0) returned 1 [0061.486] CloseHandle (hObject=0x270) returned 1 [0061.486] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.486] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e190) returned 1 [0061.486] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x14dc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0061.486] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\", nBufferLength=0x105, lpBuffer=0x14dc20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\", lpFilePart=0x0) returned 0x25 [0061.486] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x14de30 | out: lpFindFileData=0x14de30) returned 0xa748e0 [0061.487] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.487] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.487] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.487] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.487] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.487] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.488] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.488] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.488] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.488] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.488] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.488] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 0 [0061.488] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0061.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e0e0) returned 1 [0061.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e0a0) returned 1 [0061.489] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.489] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.489] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0061.489] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0061.489] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\44 KP.avi", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\44 KP.avi", lpFilePart=0x0) returned 0x2e [0061.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0061.489] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\44 KP.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\44 kp.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.489] GetFileType (hFile=0x270) returned 0x1 [0061.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0061.489] GetFileType (hFile=0x270) returned 0x1 [0061.489] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x17f7e [0061.490] ReadFile (in: hFile=0x270, lpBuffer=0x122d2af8, nNumberOfBytesToRead=0x17f7e, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x122d2af8*, lpNumberOfBytesRead=0x14df78*=0x17f7e, lpOverlapped=0x0) returned 1 [0061.491] CloseHandle (hObject=0x270) returned 1 [0061.495] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\44 KP.avi", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\44 KP.avi", lpFilePart=0x0) returned 0x2e [0061.495] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\44 KP.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\44 kp.avi")) returned 1 [0061.497] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\44 KP.avi.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\44 KP.avi.sad", lpFilePart=0x0) returned 0x32 [0061.497] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0061.497] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\44 KP.avi.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\44 kp.avi.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.497] GetFileType (hFile=0x270) returned 0x1 [0061.497] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0061.497] GetFileType (hFile=0x270) returned 0x1 [0061.498] WriteFile (in: hFile=0x270, lpBuffer=0x2264200*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2264200*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.499] WriteFile (in: hFile=0x270, lpBuffer=0x2264200*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2264200*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.499] WriteFile (in: hFile=0x270, lpBuffer=0x2264200*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2264200*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.499] WriteFile (in: hFile=0x270, lpBuffer=0x2264200*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2264200*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.500] WriteFile (in: hFile=0x270, lpBuffer=0x2264200*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2264200*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.500] WriteFile (in: hFile=0x270, lpBuffer=0x2264200*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2264200*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.500] WriteFile (in: hFile=0x270, lpBuffer=0x2264200*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2264200*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.501] WriteFile (in: hFile=0x270, lpBuffer=0x2264200*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2264200*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.501] WriteFile (in: hFile=0x270, lpBuffer=0x2264200*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2264200*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.501] WriteFile (in: hFile=0x270, lpBuffer=0x2264200*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2264200*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.502] WriteFile (in: hFile=0x270, lpBuffer=0x2264200*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2264200*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.502] WriteFile (in: hFile=0x270, lpBuffer=0x2264200*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2264200*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.512] WriteFile (in: hFile=0x270, lpBuffer=0x2264200*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2264200*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.512] WriteFile (in: hFile=0x270, lpBuffer=0x2264200*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2264200*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.513] WriteFile (in: hFile=0x270, lpBuffer=0x2264200*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2264200*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.519] WriteFile (in: hFile=0x270, lpBuffer=0x2264200*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2264200*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.519] WriteFile (in: hFile=0x270, lpBuffer=0x2264200*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2264200*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.519] WriteFile (in: hFile=0x270, lpBuffer=0x2264200*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2264200*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.520] WriteFile (in: hFile=0x270, lpBuffer=0x2264200*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2264200*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.520] WriteFile (in: hFile=0x270, lpBuffer=0x2264200*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2264200*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.520] WriteFile (in: hFile=0x270, lpBuffer=0x2264200*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2264200*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.520] WriteFile (in: hFile=0x270, lpBuffer=0x2264200*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2264200*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.521] WriteFile (in: hFile=0x270, lpBuffer=0x2264200*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2264200*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.521] WriteFile (in: hFile=0x270, lpBuffer=0x2264200*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2264200*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.521] WriteFile (in: hFile=0x270, lpBuffer=0x2264200*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2264200*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.521] WriteFile (in: hFile=0x270, lpBuffer=0x2264200*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2264200*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.522] WriteFile (in: hFile=0x270, lpBuffer=0x2264200*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2264200*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.522] WriteFile (in: hFile=0x270, lpBuffer=0x2264200*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2264200*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.522] WriteFile (in: hFile=0x270, lpBuffer=0x2264200*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2264200*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.522] WriteFile (in: hFile=0x270, lpBuffer=0x2264200*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2264200*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.525] WriteFile (in: hFile=0x270, lpBuffer=0x2264200*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2264200*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.525] WriteFile (in: hFile=0x270, lpBuffer=0x2264200*, nNumberOfBytesToWrite=0xf54, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x2264200*, lpNumberOfBytesWritten=0x14de38*=0xf54, lpOverlapped=0x0) returned 1 [0061.526] CloseHandle (hObject=0x270) returned 1 [0061.528] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0061.528] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0061.528] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.528] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0061.528] DrawTextExW (in: hdc=0x8010893, lpchText="132 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x2265400 | out: lpchText="132 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0061.528] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.528] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.528] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.528] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.528] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0061.528] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0061.528] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini", lpFilePart=0x0) returned 0x30 [0061.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0061.528] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.529] GetFileType (hFile=0x270) returned 0x1 [0061.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0061.529] GetFileType (hFile=0x270) returned 0x1 [0061.529] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x1f8 [0061.529] ReadFile (in: hFile=0x270, lpBuffer=0x2265a20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x2265a20*, lpNumberOfBytesRead=0x14df78*=0x1f8, lpOverlapped=0x0) returned 1 [0061.530] CloseHandle (hObject=0x270) returned 1 [0061.530] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini", lpFilePart=0x0) returned 0x30 [0061.530] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\desktop.ini")) returned 1 [0061.531] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini.sad", lpFilePart=0x0) returned 0x34 [0061.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0061.531] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\desktop.ini.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.531] GetFileType (hFile=0x270) returned 0x1 [0061.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0061.531] GetFileType (hFile=0x270) returned 0x1 [0061.531] WriteFile (in: hFile=0x270, lpBuffer=0x2268730*, nNumberOfBytesToWrite=0x2a0, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x2268730*, lpNumberOfBytesWritten=0x14de38*=0x2a0, lpOverlapped=0x0) returned 1 [0061.532] CloseHandle (hObject=0x270) returned 1 [0061.533] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0061.533] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0061.534] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.534] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0061.534] DrawTextExW (in: hdc=0x8010893, lpchText="133 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x2269930 | out: lpchText="133 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0061.534] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.534] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.534] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.534] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.534] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0061.534] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0061.534] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DVqxeED2l8 R.avi", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DVqxeED2l8 R.avi", lpFilePart=0x0) returned 0x35 [0061.534] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0061.534] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DVqxeED2l8 R.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dvqxeed2l8 r.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.534] GetFileType (hFile=0x270) returned 0x1 [0061.534] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0061.534] GetFileType (hFile=0x270) returned 0x1 [0061.534] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0xb599 [0061.534] ReadFile (in: hFile=0x270, lpBuffer=0x2269d68, nNumberOfBytesToRead=0xb599, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x2269d68*, lpNumberOfBytesRead=0x14df78*=0xb599, lpOverlapped=0x0) returned 1 [0061.535] CloseHandle (hObject=0x270) returned 1 [0061.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DVqxeED2l8 R.avi", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DVqxeED2l8 R.avi", lpFilePart=0x0) returned 0x35 [0061.537] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DVqxeED2l8 R.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dvqxeed2l8 r.avi")) returned 1 [0061.539] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DVqxeED2l8 R.avi.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DVqxeED2l8 R.avi.sad", lpFilePart=0x0) returned 0x39 [0061.539] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0061.539] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\DVqxeED2l8 R.avi.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\dvqxeed2l8 r.avi.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.539] GetFileType (hFile=0x270) returned 0x1 [0061.539] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0061.539] GetFileType (hFile=0x270) returned 0x1 [0061.539] WriteFile (in: hFile=0x270, lpBuffer=0x2276ae0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2276ae0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.541] WriteFile (in: hFile=0x270, lpBuffer=0x2276ae0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2276ae0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.541] WriteFile (in: hFile=0x270, lpBuffer=0x2276ae0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2276ae0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.542] WriteFile (in: hFile=0x270, lpBuffer=0x2276ae0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2276ae0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.542] WriteFile (in: hFile=0x270, lpBuffer=0x2276ae0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2276ae0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.542] WriteFile (in: hFile=0x270, lpBuffer=0x2276ae0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2276ae0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.543] WriteFile (in: hFile=0x270, lpBuffer=0x2276ae0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2276ae0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.543] WriteFile (in: hFile=0x270, lpBuffer=0x2276ae0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2276ae0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.543] WriteFile (in: hFile=0x270, lpBuffer=0x2276ae0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2276ae0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.544] WriteFile (in: hFile=0x270, lpBuffer=0x2276ae0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2276ae0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.544] WriteFile (in: hFile=0x270, lpBuffer=0x2276ae0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2276ae0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.544] WriteFile (in: hFile=0x270, lpBuffer=0x2276ae0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2276ae0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.545] WriteFile (in: hFile=0x270, lpBuffer=0x2276ae0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2276ae0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.545] WriteFile (in: hFile=0x270, lpBuffer=0x2276ae0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2276ae0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.545] WriteFile (in: hFile=0x270, lpBuffer=0x2276ae0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14de58, lpOverlapped=0x0 | out: lpBuffer=0x2276ae0*, lpNumberOfBytesWritten=0x14de58*=0x1000, lpOverlapped=0x0) returned 1 [0061.545] WriteFile (in: hFile=0x270, lpBuffer=0x2276ae0*, nNumberOfBytesToWrite=0x224, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x2276ae0*, lpNumberOfBytesWritten=0x14de38*=0x224, lpOverlapped=0x0) returned 1 [0061.546] CloseHandle (hObject=0x270) returned 1 [0061.547] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0061.547] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0061.547] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.547] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0061.547] DrawTextExW (in: hdc=0x8010893, lpchText="134 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x2277ce0 | out: lpchText="134 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0061.547] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.547] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.548] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.548] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.548] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0061.548] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0061.548] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\fgwt-fXr0IUYpM5QQfjV.swf", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\fgwt-fXr0IUYpM5QQfjV.swf", lpFilePart=0x0) returned 0x3d [0061.548] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0061.548] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\fgwt-fXr0IUYpM5QQfjV.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\fgwt-fxr0iuypm5qqfjv.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.548] GetFileType (hFile=0x270) returned 0x1 [0061.548] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0061.548] GetFileType (hFile=0x270) returned 0x1 [0061.548] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x17068 [0061.549] ReadFile (in: hFile=0x270, lpBuffer=0x12348e20, nNumberOfBytesToRead=0x17068, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x12348e20*, lpNumberOfBytesRead=0x14df78*=0x17068, lpOverlapped=0x0) returned 1 [0061.550] CloseHandle (hObject=0x270) returned 1 [0061.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\fgwt-fXr0IUYpM5QQfjV.swf", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\fgwt-fXr0IUYpM5QQfjV.swf", lpFilePart=0x0) returned 0x3d [0061.554] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\fgwt-fXr0IUYpM5QQfjV.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\fgwt-fxr0iuypm5qqfjv.swf")) returned 1 [0061.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\fgwt-fXr0IUYpM5QQfjV.swf.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\fgwt-fXr0IUYpM5QQfjV.swf.sad", lpFilePart=0x0) returned 0x41 [0061.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0061.555] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\fgwt-fXr0IUYpM5QQfjV.swf.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\fgwt-fxr0iuypm5qqfjv.swf.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.556] GetFileType (hFile=0x270) returned 0x1 [0061.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0061.556] GetFileType (hFile=0x270) returned 0x1 [0061.556] WriteFile (in: hFile=0x270, lpBuffer=0x2279948*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2279948*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.558] WriteFile (in: hFile=0x270, lpBuffer=0x2279948*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2279948*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.558] WriteFile (in: hFile=0x270, lpBuffer=0x2279948*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2279948*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.558] WriteFile (in: hFile=0x270, lpBuffer=0x2279948*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2279948*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.559] WriteFile (in: hFile=0x270, lpBuffer=0x2279948*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2279948*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.559] WriteFile (in: hFile=0x270, lpBuffer=0x2279948*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2279948*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.559] WriteFile (in: hFile=0x270, lpBuffer=0x2279948*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2279948*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.560] WriteFile (in: hFile=0x270, lpBuffer=0x2279948*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2279948*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.560] WriteFile (in: hFile=0x270, lpBuffer=0x2279948*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2279948*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.560] WriteFile (in: hFile=0x270, lpBuffer=0x2279948*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2279948*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.561] WriteFile (in: hFile=0x270, lpBuffer=0x2279948*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2279948*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.561] WriteFile (in: hFile=0x270, lpBuffer=0x2279948*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2279948*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.561] WriteFile (in: hFile=0x270, lpBuffer=0x2279948*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2279948*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.562] WriteFile (in: hFile=0x270, lpBuffer=0x2279948*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2279948*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.562] WriteFile (in: hFile=0x270, lpBuffer=0x2279948*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2279948*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.562] WriteFile (in: hFile=0x270, lpBuffer=0x2279948*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2279948*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.562] WriteFile (in: hFile=0x270, lpBuffer=0x2279948*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2279948*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.563] WriteFile (in: hFile=0x270, lpBuffer=0x2279948*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2279948*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.563] WriteFile (in: hFile=0x270, lpBuffer=0x2279948*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2279948*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.563] WriteFile (in: hFile=0x270, lpBuffer=0x2279948*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2279948*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.563] WriteFile (in: hFile=0x270, lpBuffer=0x2279948*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2279948*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.563] WriteFile (in: hFile=0x270, lpBuffer=0x2279948*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2279948*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.564] WriteFile (in: hFile=0x270, lpBuffer=0x2279948*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2279948*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.564] WriteFile (in: hFile=0x270, lpBuffer=0x2279948*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2279948*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.564] WriteFile (in: hFile=0x270, lpBuffer=0x2279948*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2279948*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.564] WriteFile (in: hFile=0x270, lpBuffer=0x2279948*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2279948*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.564] WriteFile (in: hFile=0x270, lpBuffer=0x2279948*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2279948*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.564] WriteFile (in: hFile=0x270, lpBuffer=0x2279948*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2279948*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.565] WriteFile (in: hFile=0x270, lpBuffer=0x2279948*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2279948*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.565] WriteFile (in: hFile=0x270, lpBuffer=0x2279948*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2279948*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.565] WriteFile (in: hFile=0x270, lpBuffer=0x2279948*, nNumberOfBytesToWrite=0xb38, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x2279948*, lpNumberOfBytesWritten=0x14de38*=0xb38, lpOverlapped=0x0) returned 1 [0061.565] CloseHandle (hObject=0x270) returned 1 [0061.567] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0061.567] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0061.567] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.568] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0061.568] DrawTextExW (in: hdc=0x8010893, lpchText="135 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x227ab48 | out: lpchText="135 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0061.568] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.568] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.568] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.568] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.568] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0061.568] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0061.568] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MPCxISG77.mp4", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MPCxISG77.mp4", lpFilePart=0x0) returned 0x32 [0061.568] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0061.568] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MPCxISG77.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mpcxisg77.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.568] GetFileType (hFile=0x270) returned 0x1 [0061.568] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0061.568] GetFileType (hFile=0x270) returned 0x1 [0061.568] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x3af4 [0061.568] ReadFile (in: hFile=0x270, lpBuffer=0x227af68, nNumberOfBytesToRead=0x3af4, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x227af68*, lpNumberOfBytesRead=0x14df78*=0x3af4, lpOverlapped=0x0) returned 1 [0061.569] CloseHandle (hObject=0x270) returned 1 [0061.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MPCxISG77.mp4", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MPCxISG77.mp4", lpFilePart=0x0) returned 0x32 [0061.570] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MPCxISG77.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mpcxisg77.mp4")) returned 1 [0061.571] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MPCxISG77.mp4.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MPCxISG77.mp4.sad", lpFilePart=0x0) returned 0x36 [0061.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0061.571] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\MPCxISG77.mp4.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\mpcxisg77.mp4.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.571] GetFileType (hFile=0x270) returned 0x1 [0061.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0061.571] GetFileType (hFile=0x270) returned 0x1 [0061.571] WriteFile (in: hFile=0x270, lpBuffer=0x2289f70*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2289f70*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.572] WriteFile (in: hFile=0x270, lpBuffer=0x2289f70*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2289f70*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.573] WriteFile (in: hFile=0x270, lpBuffer=0x2289f70*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2289f70*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.573] WriteFile (in: hFile=0x270, lpBuffer=0x2289f70*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2289f70*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.573] WriteFile (in: hFile=0x270, lpBuffer=0x2289f70*, nNumberOfBytesToWrite=0xe9c, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x2289f70*, lpNumberOfBytesWritten=0x14de38*=0xe9c, lpOverlapped=0x0) returned 1 [0061.573] CloseHandle (hObject=0x270) returned 1 [0061.574] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0061.574] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0061.574] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.575] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0061.575] DrawTextExW (in: hdc=0x8010893, lpchText="136 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x228b170 | out: lpchText="136 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0061.575] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.575] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.575] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.575] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.575] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.575] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.575] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.575] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.575] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0061.575] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0061.575] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UOZr- TQ-oVJXYAx.mkv", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UOZr- TQ-oVJXYAx.mkv", lpFilePart=0x0) returned 0x39 [0061.575] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0061.575] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UOZr- TQ-oVJXYAx.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uozr- tq-ovjxyax.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.575] GetFileType (hFile=0x270) returned 0x1 [0061.575] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0061.575] GetFileType (hFile=0x270) returned 0x1 [0061.575] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x5032 [0061.576] ReadFile (in: hFile=0x270, lpBuffer=0x228b7c8, nNumberOfBytesToRead=0x5032, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x228b7c8*, lpNumberOfBytesRead=0x14df78*=0x5032, lpOverlapped=0x0) returned 1 [0061.576] CloseHandle (hObject=0x270) returned 1 [0061.577] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UOZr- TQ-oVJXYAx.mkv", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UOZr- TQ-oVJXYAx.mkv", lpFilePart=0x0) returned 0x39 [0061.577] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UOZr- TQ-oVJXYAx.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uozr- tq-ovjxyax.mkv")) returned 1 [0061.578] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UOZr- TQ-oVJXYAx.mkv.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UOZr- TQ-oVJXYAx.mkv.sad", lpFilePart=0x0) returned 0x3d [0061.578] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0061.578] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\UOZr- TQ-oVJXYAx.mkv.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\uozr- tq-ovjxyax.mkv.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.579] GetFileType (hFile=0x270) returned 0x1 [0061.579] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0061.579] GetFileType (hFile=0x270) returned 0x1 [0061.579] WriteFile (in: hFile=0x270, lpBuffer=0x229f5f8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x229f5f8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.580] WriteFile (in: hFile=0x270, lpBuffer=0x229f5f8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x229f5f8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.580] WriteFile (in: hFile=0x270, lpBuffer=0x229f5f8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x229f5f8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.580] WriteFile (in: hFile=0x270, lpBuffer=0x229f5f8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x229f5f8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.581] WriteFile (in: hFile=0x270, lpBuffer=0x229f5f8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x229f5f8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.581] WriteFile (in: hFile=0x270, lpBuffer=0x229f5f8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x229f5f8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.581] WriteFile (in: hFile=0x270, lpBuffer=0x229f5f8*, nNumberOfBytesToWrite=0xaf0, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x229f5f8*, lpNumberOfBytesWritten=0x14de38*=0xaf0, lpOverlapped=0x0) returned 1 [0061.581] CloseHandle (hObject=0x270) returned 1 [0061.582] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0061.582] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0061.582] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.583] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0061.583] DrawTextExW (in: hdc=0x8010893, lpchText="137 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x22a07f8 | out: lpchText="137 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0061.583] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.583] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.583] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.583] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.583] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0061.583] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0061.583] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XEANbLiOgrUEfS_I.mp4", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XEANbLiOgrUEfS_I.mp4", lpFilePart=0x0) returned 0x39 [0061.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0061.583] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XEANbLiOgrUEfS_I.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\xeanbliogruefs_i.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.583] GetFileType (hFile=0x270) returned 0x1 [0061.583] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0061.583] GetFileType (hFile=0x270) returned 0x1 [0061.583] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0xa21f [0061.583] ReadFile (in: hFile=0x270, lpBuffer=0x22a0c48, nNumberOfBytesToRead=0xa21f, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x22a0c48*, lpNumberOfBytesRead=0x14df78*=0xa21f, lpOverlapped=0x0) returned 1 [0061.584] CloseHandle (hObject=0x270) returned 1 [0061.586] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XEANbLiOgrUEfS_I.mp4", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XEANbLiOgrUEfS_I.mp4", lpFilePart=0x0) returned 0x39 [0061.586] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XEANbLiOgrUEfS_I.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\xeanbliogruefs_i.mp4")) returned 1 [0061.588] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XEANbLiOgrUEfS_I.mp4.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XEANbLiOgrUEfS_I.mp4.sad", lpFilePart=0x0) returned 0x3d [0061.588] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0061.588] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\XEANbLiOgrUEfS_I.mp4.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\xeanbliogruefs_i.mp4.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.588] GetFileType (hFile=0x270) returned 0x1 [0061.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0061.588] GetFileType (hFile=0x270) returned 0x1 [0061.588] WriteFile (in: hFile=0x270, lpBuffer=0x22ac660*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22ac660*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.589] WriteFile (in: hFile=0x270, lpBuffer=0x22ac660*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22ac660*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.590] WriteFile (in: hFile=0x270, lpBuffer=0x22ac660*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22ac660*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.590] WriteFile (in: hFile=0x270, lpBuffer=0x22ac660*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22ac660*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.590] WriteFile (in: hFile=0x270, lpBuffer=0x22ac660*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22ac660*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.590] WriteFile (in: hFile=0x270, lpBuffer=0x22ac660*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22ac660*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.590] WriteFile (in: hFile=0x270, lpBuffer=0x22ac660*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22ac660*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.591] WriteFile (in: hFile=0x270, lpBuffer=0x22ac660*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22ac660*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.591] WriteFile (in: hFile=0x270, lpBuffer=0x22ac660*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22ac660*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.591] WriteFile (in: hFile=0x270, lpBuffer=0x22ac660*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22ac660*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.591] WriteFile (in: hFile=0x270, lpBuffer=0x22ac660*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22ac660*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.591] WriteFile (in: hFile=0x270, lpBuffer=0x22ac660*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22ac660*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.592] WriteFile (in: hFile=0x270, lpBuffer=0x22ac660*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22ac660*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.592] WriteFile (in: hFile=0x270, lpBuffer=0x22ac660*, nNumberOfBytesToWrite=0x82c, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x22ac660*, lpNumberOfBytesWritten=0x14de38*=0x82c, lpOverlapped=0x0) returned 1 [0061.592] CloseHandle (hObject=0x270) returned 1 [0061.594] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0061.594] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0061.594] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.594] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0061.594] DrawTextExW (in: hdc=0x8010893, lpchText="138 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x22ad860 | out: lpchText="138 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0061.594] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.594] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.594] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.594] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.594] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0061.594] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0061.594] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\y3PYXwsIVLofW.swf", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\y3PYXwsIVLofW.swf", lpFilePart=0x0) returned 0x36 [0061.594] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0061.594] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\y3PYXwsIVLofW.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\y3pyxwsivlofw.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.595] GetFileType (hFile=0x270) returned 0x1 [0061.595] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0061.595] GetFileType (hFile=0x270) returned 0x1 [0061.595] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x2885 [0061.595] ReadFile (in: hFile=0x270, lpBuffer=0x22adc98, nNumberOfBytesToRead=0x2885, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x22adc98*, lpNumberOfBytesRead=0x14df78*=0x2885, lpOverlapped=0x0) returned 1 [0061.596] CloseHandle (hObject=0x270) returned 1 [0061.596] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\y3PYXwsIVLofW.swf", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\y3PYXwsIVLofW.swf", lpFilePart=0x0) returned 0x36 [0061.596] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\y3PYXwsIVLofW.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\y3pyxwsivlofw.swf")) returned 1 [0061.597] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\y3PYXwsIVLofW.swf.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\y3PYXwsIVLofW.swf.sad", lpFilePart=0x0) returned 0x3a [0061.597] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0061.597] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\y3PYXwsIVLofW.swf.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\y3pyxwsivlofw.swf.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.597] GetFileType (hFile=0x270) returned 0x1 [0061.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0061.598] GetFileType (hFile=0x270) returned 0x1 [0061.598] WriteFile (in: hFile=0x270, lpBuffer=0x22b8928*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22b8928*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.599] WriteFile (in: hFile=0x270, lpBuffer=0x22b8928*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22b8928*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.599] WriteFile (in: hFile=0x270, lpBuffer=0x22b8928*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22b8928*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0061.599] WriteFile (in: hFile=0x270, lpBuffer=0x22b8928*, nNumberOfBytesToWrite=0x608, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x22b8928*, lpNumberOfBytesWritten=0x14de38*=0x608, lpOverlapped=0x0) returned 1 [0061.600] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0061.600] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0061.600] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.601] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0061.601] DrawTextExW (in: hdc=0x8010893, lpchText="139 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x22b9b28 | out: lpchText="139 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0061.601] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.601] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.601] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.601] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e190) returned 1 [0061.601] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", nBufferLength=0x105, lpBuffer=0x14dc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos", lpFilePart=0x0) returned 0x24 [0061.601] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\", nBufferLength=0x105, lpBuffer=0x14dc20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\", lpFilePart=0x0) returned 0x25 [0061.601] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x14de30 | out: lpFindFileData=0x14de30) returned 0xa748e0 [0061.601] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.604] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.604] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.605] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.605] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.605] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.605] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.605] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.605] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.605] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.605] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0061.605] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 0 [0061.606] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0061.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e0e0) returned 1 [0061.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e0a0) returned 1 [0061.606] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0061.606] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0061.606] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.606] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.606] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14d9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x46 [0061.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dea0) returned 1 [0061.606] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de10) returned 1 [0061.608] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.608] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e080) returned 1 [0061.608] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W", lpFilePart=0x0) returned 0x31 [0061.608] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\", nBufferLength=0x105, lpBuffer=0x14db10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\", lpFilePart=0x0) returned 0x32 [0061.608] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\*", lpFindFileData=0x14dd20 | out: lpFindFileData=0x14dd20) returned 0xa748e0 [0061.609] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.609] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.609] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.609] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.609] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.609] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.610] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.610] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.610] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.610] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.610] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.610] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.611] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.611] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.611] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.611] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.611] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.611] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0061.611] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 0 [0061.611] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0061.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dfd0) returned 1 [0061.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14df90) returned 1 [0061.612] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.612] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.612] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0061.612] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0061.612] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\8zRIM7rV C1alXqq7a.swf", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\8zRIM7rV C1alXqq7a.swf", lpFilePart=0x0) returned 0x48 [0061.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0061.612] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\8zRIM7rV C1alXqq7a.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\8zrim7rv c1alxqq7a.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0061.612] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x250c [0061.612] ReadFile (in: hFile=0x270, lpBuffer=0x22c15e0, nNumberOfBytesToRead=0x250c, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x22c15e0*, lpNumberOfBytesRead=0x14de68*=0x250c, lpOverlapped=0x0) returned 1 [0061.613] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\8zRIM7rV C1alXqq7a.swf", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\8zRIM7rV C1alXqq7a.swf", lpFilePart=0x0) returned 0x48 [0061.613] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\8zRIM7rV C1alXqq7a.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\8zrim7rv c1alxqq7a.swf")) returned 1 [0061.614] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\8zRIM7rV C1alXqq7a.swf.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\8zRIM7rV C1alXqq7a.swf.sad", lpFilePart=0x0) returned 0x4c [0061.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0061.614] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\8zRIM7rV C1alXqq7a.swf.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\8zrim7rv c1alxqq7a.swf.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.615] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0061.616] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0061.616] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0061.616] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.616] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0061.616] DrawTextExW (in: hdc=0x8010893, lpchText="140 Files\r\nEncrypted", cchText=20, lprc=0x14dc08, format=0x2400, lpdtp=0x22cc838 | out: lpchText="140 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0061.617] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.617] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.617] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.617] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.617] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0061.617] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0061.617] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\AsClV.mkv", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\AsClV.mkv", lpFilePart=0x0) returned 0x3b [0061.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0061.617] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\AsClV.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\asclv.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0061.617] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x6d7b [0061.618] ReadFile (in: hFile=0x270, lpBuffer=0x22ccc58, nNumberOfBytesToRead=0x6d7b, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x22ccc58*, lpNumberOfBytesRead=0x14de68*=0x6d7b, lpOverlapped=0x0) returned 1 [0061.620] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\AsClV.mkv", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\AsClV.mkv", lpFilePart=0x0) returned 0x3b [0061.620] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\AsClV.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\asclv.mkv")) returned 1 [0061.621] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\AsClV.mkv.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\AsClV.mkv.sad", lpFilePart=0x0) returned 0x3f [0061.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0061.622] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\AsClV.mkv.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\asclv.mkv.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0061.624] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0061.624] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0061.624] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.624] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0061.624] DrawTextExW (in: hdc=0x8010893, lpchText="141 Files\r\nEncrypted", cchText=20, lprc=0x14dc08, format=0x2400, lpdtp=0x22e87d0 | out: lpchText="141 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0061.624] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.625] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.625] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.625] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.625] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0061.625] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0061.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\k5MbMULBxV.mkv", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\k5MbMULBxV.mkv", lpFilePart=0x0) returned 0x40 [0061.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0061.625] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\k5MbMULBxV.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\k5mbmulbxv.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0061.625] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0xf404 [0061.626] ReadFile (in: hFile=0x270, lpBuffer=0x22e8c10, nNumberOfBytesToRead=0xf404, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x22e8c10*, lpNumberOfBytesRead=0x14de68*=0xf404, lpOverlapped=0x0) returned 1 [0061.629] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\k5MbMULBxV.mkv", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\k5MbMULBxV.mkv", lpFilePart=0x0) returned 0x40 [0061.629] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\k5MbMULBxV.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\k5mbmulbxv.mkv")) returned 1 [0061.633] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\k5MbMULBxV.mkv.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\k5MbMULBxV.mkv.sad", lpFilePart=0x0) returned 0x44 [0061.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0061.633] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\k5MbMULBxV.mkv.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\k5mbmulbxv.mkv.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0061.638] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0061.638] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0061.639] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.639] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0061.639] DrawTextExW (in: hdc=0x8010893, lpchText="142 Files\r\nEncrypted", cchText=20, lprc=0x14dc08, format=0x2400, lpdtp=0x22faa30 | out: lpchText="142 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0061.639] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.639] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.639] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.639] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.639] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0061.639] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0061.639] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\KgHev__7.mp4", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\KgHev__7.mp4", lpFilePart=0x0) returned 0x3e [0061.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0061.639] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\KgHev__7.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\kghev__7.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0061.640] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x10db [0061.640] ReadFile (in: hFile=0x270, lpBuffer=0x22fae68, nNumberOfBytesToRead=0x10db, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x22fae68*, lpNumberOfBytesRead=0x14de68*=0x10db, lpOverlapped=0x0) returned 1 [0061.641] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\KgHev__7.mp4", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\KgHev__7.mp4", lpFilePart=0x0) returned 0x3e [0061.641] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\KgHev__7.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\kghev__7.mp4")) returned 1 [0061.642] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\KgHev__7.mp4.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\KgHev__7.mp4.sad", lpFilePart=0x0) returned 0x42 [0061.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0061.642] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\KgHev__7.mp4.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\kghev__7.mp4.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0061.643] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0061.643] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0061.644] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.644] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0061.644] DrawTextExW (in: hdc=0x8010893, lpchText="143 Files\r\nEncrypted", cchText=20, lprc=0x14dc08, format=0x2400, lpdtp=0x2301660 | out: lpchText="143 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0061.644] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.644] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.644] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.644] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.644] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0061.644] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0061.644] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\k_RJo8qBFWFrw9sWT_.mp4", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\k_RJo8qBFWFrw9sWT_.mp4", lpFilePart=0x0) returned 0x48 [0061.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0061.644] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\k_RJo8qBFWFrw9sWT_.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\k_rjo8qbfwfrw9swt_.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0061.644] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x3442 [0061.645] ReadFile (in: hFile=0x270, lpBuffer=0x2301ad0, nNumberOfBytesToRead=0x3442, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x2301ad0*, lpNumberOfBytesRead=0x14de68*=0x3442, lpOverlapped=0x0) returned 1 [0061.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\k_RJo8qBFWFrw9sWT_.mp4", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\k_RJo8qBFWFrw9sWT_.mp4", lpFilePart=0x0) returned 0x48 [0061.646] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\k_RJo8qBFWFrw9sWT_.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\k_rjo8qbfwfrw9swt_.mp4")) returned 1 [0061.647] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\k_RJo8qBFWFrw9sWT_.mp4.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\k_RJo8qBFWFrw9sWT_.mp4.sad", lpFilePart=0x0) returned 0x4c [0061.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0061.647] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\k_RJo8qBFWFrw9sWT_.mp4.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\k_rjo8qbfwfrw9swt_.mp4.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0061.649] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0061.649] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0061.649] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.649] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0061.649] DrawTextExW (in: hdc=0x8010893, lpchText="144 Files\r\nEncrypted", cchText=20, lprc=0x14dc08, format=0x2400, lpdtp=0x23104f0 | out: lpchText="144 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0061.650] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.650] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.650] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.650] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.650] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0061.650] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0061.650] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\mplvkgt.mkv", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\mplvkgt.mkv", lpFilePart=0x0) returned 0x3d [0061.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0061.650] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\mplvkgt.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\mplvkgt.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0061.650] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x7a21 [0061.651] ReadFile (in: hFile=0x270, lpBuffer=0x2310918, nNumberOfBytesToRead=0x7a21, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x2310918*, lpNumberOfBytesRead=0x14de68*=0x7a21, lpOverlapped=0x0) returned 1 [0061.653] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\mplvkgt.mkv", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\mplvkgt.mkv", lpFilePart=0x0) returned 0x3d [0061.653] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\mplvkgt.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\mplvkgt.mkv")) returned 1 [0061.654] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\mplvkgt.mkv.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\mplvkgt.mkv.sad", lpFilePart=0x0) returned 0x41 [0061.654] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0061.655] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\mplvkgt.mkv.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\mplvkgt.mkv.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.655] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0061.657] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0061.657] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0061.657] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.657] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0061.657] DrawTextExW (in: hdc=0x8010893, lpchText="145 Files\r\nEncrypted", cchText=20, lprc=0x14dc08, format=0x2400, lpdtp=0x232f308 | out: lpchText="145 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0061.657] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.657] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.657] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.657] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.657] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0061.657] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0061.657] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\pF fiW.flv", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\pF fiW.flv", lpFilePart=0x0) returned 0x3c [0061.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0061.657] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\pF fiW.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\pf fiw.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.658] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0061.658] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x16e26 [0061.658] ReadFile (in: hFile=0x270, lpBuffer=0x123e1100, nNumberOfBytesToRead=0x16e26, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x123e1100*, lpNumberOfBytesRead=0x14de68*=0x16e26, lpOverlapped=0x0) returned 1 [0061.662] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\pF fiW.flv", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\pF fiW.flv", lpFilePart=0x0) returned 0x3c [0061.662] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\pF fiW.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\pf fiw.flv")) returned 1 [0061.664] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\pF fiW.flv.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\pF fiW.flv.sad", lpFilePart=0x0) returned 0x40 [0061.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0061.665] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\pF fiW.flv.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\pf fiw.flv.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0061.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0061.668] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0061.668] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0061.668] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0061.669] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0061.669] DrawTextExW (in: hdc=0x8010893, lpchText="146 Files\r\nEncrypted", cchText=20, lprc=0x14dc08, format=0x2400, lpdtp=0x2332110 | out: lpchText="146 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0061.669] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.669] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.669] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0061.669] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0061.669] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0061.669] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0061.669] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\PNwP.mkv", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\PNwP.mkv", lpFilePart=0x0) returned 0x3a [0061.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0061.669] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\PNwP.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\pnwp.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0061.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0061.669] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x143cf [0061.670] ReadFile (in: hFile=0x270, lpBuffer=0x2332530, nNumberOfBytesToRead=0x143cf, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x2332530*, lpNumberOfBytesRead=0x14de68*=0x143cf, lpOverlapped=0x0) returned 1 [0061.673] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\PNwP.mkv", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\PNwP.mkv", lpFilePart=0x0) returned 0x3a [0061.673] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\PNwP.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\pnwp.mkv")) returned 1 [0061.675] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\PNwP.mkv.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\PNwP.mkv.sad", lpFilePart=0x0) returned 0x3e [0062.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0062.038] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\PNwP.mkv.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\pnwp.mkv.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0062.039] GetFileType (hFile=0x270) returned 0x1 [0062.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0062.039] GetFileType (hFile=0x270) returned 0x1 [0062.040] WriteFile (in: hFile=0x270, lpBuffer=0x2148090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2148090*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.041] WriteFile (in: hFile=0x270, lpBuffer=0x2148090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2148090*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.041] WriteFile (in: hFile=0x270, lpBuffer=0x2148090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2148090*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.042] WriteFile (in: hFile=0x270, lpBuffer=0x2148090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2148090*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.042] WriteFile (in: hFile=0x270, lpBuffer=0x2148090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2148090*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.042] WriteFile (in: hFile=0x270, lpBuffer=0x2148090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2148090*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.043] WriteFile (in: hFile=0x270, lpBuffer=0x2148090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2148090*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.043] WriteFile (in: hFile=0x270, lpBuffer=0x2148090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2148090*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.044] WriteFile (in: hFile=0x270, lpBuffer=0x2148090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2148090*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.044] WriteFile (in: hFile=0x270, lpBuffer=0x2148090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2148090*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.044] WriteFile (in: hFile=0x270, lpBuffer=0x2148090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2148090*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.045] WriteFile (in: hFile=0x270, lpBuffer=0x2148090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2148090*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.045] WriteFile (in: hFile=0x270, lpBuffer=0x2148090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2148090*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.045] WriteFile (in: hFile=0x270, lpBuffer=0x2148090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2148090*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.046] WriteFile (in: hFile=0x270, lpBuffer=0x2148090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2148090*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.046] WriteFile (in: hFile=0x270, lpBuffer=0x2148090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2148090*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.046] WriteFile (in: hFile=0x270, lpBuffer=0x2148090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2148090*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.047] WriteFile (in: hFile=0x270, lpBuffer=0x2148090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2148090*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.047] WriteFile (in: hFile=0x270, lpBuffer=0x2148090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2148090*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.048] WriteFile (in: hFile=0x270, lpBuffer=0x2148090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2148090*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.048] WriteFile (in: hFile=0x270, lpBuffer=0x2148090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2148090*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.048] WriteFile (in: hFile=0x270, lpBuffer=0x2148090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2148090*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.049] WriteFile (in: hFile=0x270, lpBuffer=0x2148090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2148090*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.049] WriteFile (in: hFile=0x270, lpBuffer=0x2148090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2148090*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.049] WriteFile (in: hFile=0x270, lpBuffer=0x2148090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2148090*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.049] WriteFile (in: hFile=0x270, lpBuffer=0x2148090*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2148090*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.050] WriteFile (in: hFile=0x270, lpBuffer=0x2148090*, nNumberOfBytesToWrite=0xfc0, lpNumberOfBytesWritten=0x14dd28, lpOverlapped=0x0 | out: lpBuffer=0x2148090*, lpNumberOfBytesWritten=0x14dd28*=0xfc0, lpOverlapped=0x0) returned 1 [0062.050] CloseHandle (hObject=0x270) returned 1 [0062.055] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0062.055] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0062.055] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0062.056] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0062.056] DrawTextExW (in: hdc=0x8010893, lpchText="147 Files\r\nEncrypted", cchText=20, lprc=0x14dc08, format=0x2400, lpdtp=0x2149290 | out: lpchText="147 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0062.056] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0062.056] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0062.056] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0062.057] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0062.057] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0062.057] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0062.057] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\qsvCxe.mkv", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\qsvCxe.mkv", lpFilePart=0x0) returned 0x3c [0062.057] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0062.057] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\qsvCxe.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\qsvcxe.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0062.057] GetFileType (hFile=0x270) returned 0x1 [0062.057] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0062.057] GetFileType (hFile=0x270) returned 0x1 [0062.057] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x5040 [0062.057] ReadFile (in: hFile=0x270, lpBuffer=0x21496b8, nNumberOfBytesToRead=0x5040, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x21496b8*, lpNumberOfBytesRead=0x14de68*=0x5040, lpOverlapped=0x0) returned 1 [0062.059] CloseHandle (hObject=0x270) returned 1 [0062.059] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\qsvCxe.mkv", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\qsvCxe.mkv", lpFilePart=0x0) returned 0x3c [0062.059] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\qsvCxe.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\qsvcxe.mkv")) returned 1 [0062.060] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\qsvCxe.mkv.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\qsvCxe.mkv.sad", lpFilePart=0x0) returned 0x40 [0062.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0062.061] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\qsvCxe.mkv.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\qsvcxe.mkv.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0062.061] GetFileType (hFile=0x270) returned 0x1 [0062.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0062.061] GetFileType (hFile=0x270) returned 0x1 [0062.061] WriteFile (in: hFile=0x270, lpBuffer=0x215d510*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x215d510*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.062] WriteFile (in: hFile=0x270, lpBuffer=0x215d510*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x215d510*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.063] WriteFile (in: hFile=0x270, lpBuffer=0x215d510*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x215d510*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.063] WriteFile (in: hFile=0x270, lpBuffer=0x215d510*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x215d510*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.063] WriteFile (in: hFile=0x270, lpBuffer=0x215d510*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x215d510*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.064] WriteFile (in: hFile=0x270, lpBuffer=0x215d510*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x215d510*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.064] WriteFile (in: hFile=0x270, lpBuffer=0x215d510*, nNumberOfBytesToWrite=0xb00, lpNumberOfBytesWritten=0x14dd28, lpOverlapped=0x0 | out: lpBuffer=0x215d510*, lpNumberOfBytesWritten=0x14dd28*=0xb00, lpOverlapped=0x0) returned 1 [0062.064] CloseHandle (hObject=0x270) returned 1 [0062.066] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0062.066] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0062.067] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0062.068] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0062.068] DrawTextExW (in: hdc=0x8010893, lpchText="148 Files\r\nEncrypted", cchText=20, lprc=0x14dc08, format=0x2400, lpdtp=0x215e710 | out: lpchText="148 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0062.068] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0062.068] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0062.068] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0062.068] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0062.068] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0062.068] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0062.068] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0062.068] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0062.068] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0062.068] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0062.068] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\u7zJX.mp4", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\u7zJX.mp4", lpFilePart=0x0) returned 0x3b [0062.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0062.069] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\u7zJX.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\u7zjx.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0062.069] GetFileType (hFile=0x270) returned 0x1 [0062.069] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0062.069] GetFileType (hFile=0x270) returned 0x1 [0062.069] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0xdded [0062.069] ReadFile (in: hFile=0x270, lpBuffer=0x215ed38, nNumberOfBytesToRead=0xdded, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x215ed38*, lpNumberOfBytesRead=0x14de68*=0xdded, lpOverlapped=0x0) returned 1 [0062.070] CloseHandle (hObject=0x270) returned 1 [0062.070] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\u7zJX.mp4", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\u7zJX.mp4", lpFilePart=0x0) returned 0x3b [0062.070] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\u7zJX.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\u7zjx.mp4")) returned 1 [0062.077] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\u7zJX.mp4.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\u7zJX.mp4.sad", lpFilePart=0x0) returned 0x3f [0062.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0062.077] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\u7zJX.mp4.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\u7zjx.mp4.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0062.077] GetFileType (hFile=0x270) returned 0x1 [0062.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0062.077] GetFileType (hFile=0x270) returned 0x1 [0062.078] WriteFile (in: hFile=0x270, lpBuffer=0x216e308*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216e308*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.079] WriteFile (in: hFile=0x270, lpBuffer=0x216e308*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216e308*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.080] WriteFile (in: hFile=0x270, lpBuffer=0x216e308*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216e308*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.080] WriteFile (in: hFile=0x270, lpBuffer=0x216e308*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216e308*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.080] WriteFile (in: hFile=0x270, lpBuffer=0x216e308*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216e308*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.081] WriteFile (in: hFile=0x270, lpBuffer=0x216e308*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216e308*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.081] WriteFile (in: hFile=0x270, lpBuffer=0x216e308*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216e308*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.081] WriteFile (in: hFile=0x270, lpBuffer=0x216e308*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216e308*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.082] WriteFile (in: hFile=0x270, lpBuffer=0x216e308*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216e308*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.082] WriteFile (in: hFile=0x270, lpBuffer=0x216e308*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216e308*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.082] WriteFile (in: hFile=0x270, lpBuffer=0x216e308*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216e308*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.083] WriteFile (in: hFile=0x270, lpBuffer=0x216e308*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216e308*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.083] WriteFile (in: hFile=0x270, lpBuffer=0x216e308*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216e308*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.083] WriteFile (in: hFile=0x270, lpBuffer=0x216e308*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216e308*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.084] WriteFile (in: hFile=0x270, lpBuffer=0x216e308*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216e308*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.084] WriteFile (in: hFile=0x270, lpBuffer=0x216e308*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216e308*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.084] WriteFile (in: hFile=0x270, lpBuffer=0x216e308*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216e308*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.085] WriteFile (in: hFile=0x270, lpBuffer=0x216e308*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x216e308*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.085] WriteFile (in: hFile=0x270, lpBuffer=0x216e308*, nNumberOfBytesToWrite=0x7e8, lpNumberOfBytesWritten=0x14dd28, lpOverlapped=0x0 | out: lpBuffer=0x216e308*, lpNumberOfBytesWritten=0x14dd28*=0x7e8, lpOverlapped=0x0) returned 1 [0062.085] CloseHandle (hObject=0x270) returned 1 [0062.088] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0062.088] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0062.088] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0062.088] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0062.088] DrawTextExW (in: hdc=0x8010893, lpchText="149 Files\r\nEncrypted", cchText=20, lprc=0x14dc08, format=0x2400, lpdtp=0x216f508 | out: lpchText="149 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0062.088] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0062.088] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0062.088] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0062.088] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0062.088] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0062.088] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0062.088] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\uvSE7aJ46RHedORykZc.avi", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\uvSE7aJ46RHedORykZc.avi", lpFilePart=0x0) returned 0x49 [0062.088] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0062.089] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\uvSE7aJ46RHedORykZc.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\uvse7aj46rhedorykzc.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0062.089] GetFileType (hFile=0x270) returned 0x1 [0062.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0062.089] GetFileType (hFile=0x270) returned 0x1 [0062.089] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x14a0 [0062.089] ReadFile (in: hFile=0x270, lpBuffer=0x216f978, nNumberOfBytesToRead=0x14a0, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x216f978*, lpNumberOfBytesRead=0x14de68*=0x14a0, lpOverlapped=0x0) returned 1 [0062.090] CloseHandle (hObject=0x270) returned 1 [0062.090] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\uvSE7aJ46RHedORykZc.avi", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\uvSE7aJ46RHedORykZc.avi", lpFilePart=0x0) returned 0x49 [0062.090] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\uvSE7aJ46RHedORykZc.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\uvse7aj46rhedorykzc.avi")) returned 1 [0062.091] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\uvSE7aJ46RHedORykZc.avi.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\uvSE7aJ46RHedORykZc.avi.sad", lpFilePart=0x0) returned 0x4d [0062.091] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0062.091] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\uvSE7aJ46RHedORykZc.avi.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\uvse7aj46rhedorykzc.avi.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0062.092] GetFileType (hFile=0x270) returned 0x1 [0062.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0062.092] GetFileType (hFile=0x270) returned 0x1 [0062.092] WriteFile (in: hFile=0x270, lpBuffer=0x2175d90*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2175d90*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.093] WriteFile (in: hFile=0x270, lpBuffer=0x2175d90*, nNumberOfBytesToWrite=0xb80, lpNumberOfBytesWritten=0x14dd28, lpOverlapped=0x0 | out: lpBuffer=0x2175d90*, lpNumberOfBytesWritten=0x14dd28*=0xb80, lpOverlapped=0x0) returned 1 [0062.093] CloseHandle (hObject=0x270) returned 1 [0062.096] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0062.096] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0062.097] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0062.097] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0062.097] DrawTextExW (in: hdc=0x8010893, lpchText="150 Files\r\nEncrypted", cchText=20, lprc=0x14dc08, format=0x2400, lpdtp=0x2176f90 | out: lpchText="150 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0062.097] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0062.097] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0062.097] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0062.097] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0062.097] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0062.097] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0062.097] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\WtKVwjnkJaOixos.mkv", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\WtKVwjnkJaOixos.mkv", lpFilePart=0x0) returned 0x45 [0062.097] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0062.097] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\WtKVwjnkJaOixos.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\wtkvwjnkjaoixos.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0062.099] GetFileType (hFile=0x270) returned 0x1 [0062.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0062.099] GetFileType (hFile=0x270) returned 0x1 [0062.099] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x1c60 [0062.099] ReadFile (in: hFile=0x270, lpBuffer=0x21773e8, nNumberOfBytesToRead=0x1c60, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x21773e8*, lpNumberOfBytesRead=0x14de68*=0x1c60, lpOverlapped=0x0) returned 1 [0062.100] CloseHandle (hObject=0x270) returned 1 [0062.100] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\WtKVwjnkJaOixos.mkv", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\WtKVwjnkJaOixos.mkv", lpFilePart=0x0) returned 0x45 [0062.100] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\WtKVwjnkJaOixos.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\wtkvwjnkjaoixos.mkv")) returned 1 [0062.102] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\WtKVwjnkJaOixos.mkv.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\WtKVwjnkJaOixos.mkv.sad", lpFilePart=0x0) returned 0x49 [0062.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0062.102] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\WtKVwjnkJaOixos.mkv.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\wtkvwjnkjaoixos.mkv.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0062.102] GetFileType (hFile=0x270) returned 0x1 [0062.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0062.103] GetFileType (hFile=0x270) returned 0x1 [0062.103] WriteFile (in: hFile=0x270, lpBuffer=0x217f450*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x217f450*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.104] WriteFile (in: hFile=0x270, lpBuffer=0x217f450*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x217f450*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.104] WriteFile (in: hFile=0x270, lpBuffer=0x217f450*, nNumberOfBytesToWrite=0x5d8, lpNumberOfBytesWritten=0x14dd28, lpOverlapped=0x0 | out: lpBuffer=0x217f450*, lpNumberOfBytesWritten=0x14dd28*=0x5d8, lpOverlapped=0x0) returned 1 [0062.104] CloseHandle (hObject=0x270) returned 1 [0062.106] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0062.106] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0062.106] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0062.106] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0062.106] DrawTextExW (in: hdc=0x8010893, lpchText="151 Files\r\nEncrypted", cchText=20, lprc=0x14dc08, format=0x2400, lpdtp=0x2180650 | out: lpchText="151 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0062.106] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0062.106] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0062.106] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0062.106] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0062.106] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0062.107] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0062.107] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\YV2-NETXY3HA.mp4", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\YV2-NETXY3HA.mp4", lpFilePart=0x0) returned 0x42 [0062.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0062.107] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\YV2-NETXY3HA.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\yv2-netxy3ha.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0062.107] GetFileType (hFile=0x270) returned 0x1 [0062.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0062.107] GetFileType (hFile=0x270) returned 0x1 [0062.108] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x4497 [0062.108] ReadFile (in: hFile=0x270, lpBuffer=0x2180aa0, nNumberOfBytesToRead=0x4497, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x2180aa0*, lpNumberOfBytesRead=0x14de68*=0x4497, lpOverlapped=0x0) returned 1 [0062.108] CloseHandle (hObject=0x270) returned 1 [0062.109] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\YV2-NETXY3HA.mp4", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\YV2-NETXY3HA.mp4", lpFilePart=0x0) returned 0x42 [0062.111] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\YV2-NETXY3HA.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\yv2-netxy3ha.mp4")) returned 1 [0062.112] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\YV2-NETXY3HA.mp4.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\YV2-NETXY3HA.mp4.sad", lpFilePart=0x0) returned 0x46 [0062.112] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0062.112] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\YV2-NETXY3HA.mp4.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\yv2-netxy3ha.mp4.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0062.112] GetFileType (hFile=0x270) returned 0x1 [0062.112] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0062.112] GetFileType (hFile=0x270) returned 0x1 [0062.112] WriteFile (in: hFile=0x270, lpBuffer=0x2191e60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2191e60*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.113] WriteFile (in: hFile=0x270, lpBuffer=0x2191e60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2191e60*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.113] WriteFile (in: hFile=0x270, lpBuffer=0x2191e60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2191e60*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.114] WriteFile (in: hFile=0x270, lpBuffer=0x2191e60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2191e60*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.114] WriteFile (in: hFile=0x270, lpBuffer=0x2191e60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2191e60*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.114] WriteFile (in: hFile=0x270, lpBuffer=0x2191e60*, nNumberOfBytesToWrite=0xb74, lpNumberOfBytesWritten=0x14dd28, lpOverlapped=0x0 | out: lpBuffer=0x2191e60*, lpNumberOfBytesWritten=0x14dd28*=0xb74, lpOverlapped=0x0) returned 1 [0062.114] CloseHandle (hObject=0x270) returned 1 [0062.115] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0062.115] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0062.115] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0062.115] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0062.115] DrawTextExW (in: hdc=0x8010893, lpchText="152 Files\r\nEncrypted", cchText=20, lprc=0x14dc08, format=0x2400, lpdtp=0x2193060 | out: lpchText="152 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0062.116] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0062.116] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0062.116] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0062.116] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0062.116] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0062.116] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0062.116] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\zo_89kR0m4rC.mkv", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\zo_89kR0m4rC.mkv", lpFilePart=0x0) returned 0x42 [0062.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0062.116] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\zo_89kR0m4rC.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\zo_89kr0m4rc.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0062.116] GetFileType (hFile=0x270) returned 0x1 [0062.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0062.116] GetFileType (hFile=0x270) returned 0x1 [0062.116] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x7734 [0062.116] ReadFile (in: hFile=0x270, lpBuffer=0x21934b0, nNumberOfBytesToRead=0x7734, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x21934b0*, lpNumberOfBytesRead=0x14de68*=0x7734, lpOverlapped=0x0) returned 1 [0062.117] CloseHandle (hObject=0x270) returned 1 [0062.118] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\zo_89kR0m4rC.mkv", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\zo_89kR0m4rC.mkv", lpFilePart=0x0) returned 0x42 [0062.118] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\zo_89kR0m4rC.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\zo_89kr0m4rc.mkv")) returned 1 [0062.122] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\zo_89kR0m4rC.mkv.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\zo_89kR0m4rC.mkv.sad", lpFilePart=0x0) returned 0x46 [0062.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0062.122] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\zo_89kR0m4rC.mkv.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\zo_89kr0m4rc.mkv.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0062.122] GetFileType (hFile=0x270) returned 0x1 [0062.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0062.122] GetFileType (hFile=0x270) returned 0x1 [0062.123] WriteFile (in: hFile=0x270, lpBuffer=0x21b0208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x21b0208*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.124] WriteFile (in: hFile=0x270, lpBuffer=0x21b0208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x21b0208*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.124] WriteFile (in: hFile=0x270, lpBuffer=0x21b0208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x21b0208*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.124] WriteFile (in: hFile=0x270, lpBuffer=0x21b0208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x21b0208*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.124] WriteFile (in: hFile=0x270, lpBuffer=0x21b0208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x21b0208*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.124] WriteFile (in: hFile=0x270, lpBuffer=0x21b0208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x21b0208*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.125] WriteFile (in: hFile=0x270, lpBuffer=0x21b0208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x21b0208*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.125] WriteFile (in: hFile=0x270, lpBuffer=0x21b0208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x21b0208*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.125] WriteFile (in: hFile=0x270, lpBuffer=0x21b0208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x21b0208*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.125] WriteFile (in: hFile=0x270, lpBuffer=0x21b0208*, nNumberOfBytesToWrite=0xef0, lpNumberOfBytesWritten=0x14dd28, lpOverlapped=0x0 | out: lpBuffer=0x21b0208*, lpNumberOfBytesWritten=0x14dd28*=0xef0, lpOverlapped=0x0) returned 1 [0062.125] CloseHandle (hObject=0x270) returned 1 [0062.128] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0062.128] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0062.129] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0062.129] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0062.129] DrawTextExW (in: hdc=0x8010893, lpchText="153 Files\r\nEncrypted", cchText=20, lprc=0x14dc08, format=0x2400, lpdtp=0x21b1408 | out: lpchText="153 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0062.129] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0062.129] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0062.129] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0062.129] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0062.129] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0062.129] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0062.129] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\ztPOFGwmTS34jTcj_.mkv", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\ztPOFGwmTS34jTcj_.mkv", lpFilePart=0x0) returned 0x47 [0062.130] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0062.130] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\ztPOFGwmTS34jTcj_.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\ztpofgwmts34jtcj_.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0062.130] GetFileType (hFile=0x270) returned 0x1 [0062.130] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0062.130] GetFileType (hFile=0x270) returned 0x1 [0062.130] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x6b94 [0062.130] ReadFile (in: hFile=0x270, lpBuffer=0x21b1870, nNumberOfBytesToRead=0x6b94, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x21b1870*, lpNumberOfBytesRead=0x14de68*=0x6b94, lpOverlapped=0x0) returned 1 [0062.131] CloseHandle (hObject=0x270) returned 1 [0062.131] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\ztPOFGwmTS34jTcj_.mkv", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\ztPOFGwmTS34jTcj_.mkv", lpFilePart=0x0) returned 0x47 [0062.131] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\ztPOFGwmTS34jTcj_.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\ztpofgwmts34jtcj_.mkv")) returned 1 [0062.133] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\ztPOFGwmTS34jTcj_.mkv.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\ztPOFGwmTS34jTcj_.mkv.sad", lpFilePart=0x0) returned 0x4b [0062.133] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0062.133] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\ztPOFGwmTS34jTcj_.mkv.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\ztpofgwmts34jtcj_.mkv.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0062.134] GetFileType (hFile=0x270) returned 0x1 [0062.134] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0062.134] GetFileType (hFile=0x270) returned 0x1 [0062.134] WriteFile (in: hFile=0x270, lpBuffer=0x21cbb48*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x21cbb48*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.136] WriteFile (in: hFile=0x270, lpBuffer=0x21cbb48*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x21cbb48*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.136] WriteFile (in: hFile=0x270, lpBuffer=0x21cbb48*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x21cbb48*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.136] WriteFile (in: hFile=0x270, lpBuffer=0x21cbb48*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x21cbb48*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.136] WriteFile (in: hFile=0x270, lpBuffer=0x21cbb48*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x21cbb48*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.137] WriteFile (in: hFile=0x270, lpBuffer=0x21cbb48*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x21cbb48*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.137] WriteFile (in: hFile=0x270, lpBuffer=0x21cbb48*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x21cbb48*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.137] WriteFile (in: hFile=0x270, lpBuffer=0x21cbb48*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x21cbb48*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0062.137] WriteFile (in: hFile=0x270, lpBuffer=0x21cbb48*, nNumberOfBytesToWrite=0xf70, lpNumberOfBytesWritten=0x14dd28, lpOverlapped=0x0 | out: lpBuffer=0x21cbb48*, lpNumberOfBytesWritten=0x14dd28*=0xf70, lpOverlapped=0x0) returned 1 [0062.138] CloseHandle (hObject=0x270) returned 1 [0062.139] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0062.140] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0062.140] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0062.145] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0062.145] DrawTextExW (in: hdc=0x8010893, lpchText="154 Files\r\nEncrypted", cchText=20, lprc=0x14dc08, format=0x2400, lpdtp=0x21ccd48 | out: lpchText="154 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0062.145] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0062.145] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0062.145] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0062.145] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0062.145] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e080) returned 1 [0062.145] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W", lpFilePart=0x0) returned 0x31 [0062.145] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\", nBufferLength=0x105, lpBuffer=0x14db10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\", lpFilePart=0x0) returned 0x32 [0062.146] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\*", lpFindFileData=0x14dd20 | out: lpFindFileData=0x14dd20) returned 0xa748e0 [0062.146] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0062.146] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0062.146] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0062.146] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0062.147] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0062.147] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0062.147] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0062.147] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0062.147] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0062.147] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0062.148] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0062.148] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0062.148] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0062.148] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0062.148] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0062.148] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0062.149] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0062.149] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0062.149] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 0 [0062.149] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0062.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dfd0) returned 1 [0062.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14df90) returned 1 [0062.150] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0062.150] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0062.150] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0062.150] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0062.150] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14d8b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x5b [0062.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dd90) returned 1 [0062.150] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\jswzjis-qn-ls9cikx6g\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0062.151] GetFileType (hFile=0x270) returned 0x1 [0062.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd00) returned 1 [0062.151] GetFileType (hFile=0x270) returned 0x1 [0062.151] WriteFile (in: hFile=0x270, lpBuffer=0x21d14d8*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x14ddd8, lpOverlapped=0x0 | out: lpBuffer=0x21d14d8*, lpNumberOfBytesWritten=0x14ddd8*=0x119, lpOverlapped=0x0) returned 1 [0062.152] CloseHandle (hObject=0x270) returned 1 [0062.152] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0062.152] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0062.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14df70) returned 1 [0062.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G", lpFilePart=0x0) returned 0x46 [0062.152] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\", nBufferLength=0x105, lpBuffer=0x14da00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\", lpFilePart=0x0) returned 0x47 [0062.152] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\*", lpFindFileData=0x14dc10 | out: lpFindFileData=0x14dc10) returned 0xa748e0 [0062.153] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0062.153] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0062.153] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0062.153] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0062.153] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0062.153] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0062.154] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0062.154] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0062.154] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0062.154] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0062.154] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 0 [0062.154] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0062.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dec0) returned 1 [0062.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de80) returned 1 [0062.154] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0062.154] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0062.155] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0062.155] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0062.155] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\014Ap8HQu4NHe3 TneKR.swf", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\014Ap8HQu4NHe3 TneKR.swf", lpFilePart=0x0) returned 0x5f [0062.155] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0062.155] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\014Ap8HQu4NHe3 TneKR.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\jswzjis-qn-ls9cikx6g\\014ap8hqu4nhe3 tnekr.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0062.155] GetFileType (hFile=0x270) returned 0x1 [0062.155] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0062.155] GetFileType (hFile=0x270) returned 0x1 [0062.155] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x34d6 [0062.155] ReadFile (in: hFile=0x270, lpBuffer=0x21d4e80, nNumberOfBytesToRead=0x34d6, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x21d4e80*, lpNumberOfBytesRead=0x14dd58*=0x34d6, lpOverlapped=0x0) returned 1 [0062.156] CloseHandle (hObject=0x270) returned 1 [0062.156] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\014Ap8HQu4NHe3 TneKR.swf", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\014Ap8HQu4NHe3 TneKR.swf", lpFilePart=0x0) returned 0x5f [0062.156] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\014Ap8HQu4NHe3 TneKR.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\jswzjis-qn-ls9cikx6g\\014ap8hqu4nhe3 tnekr.swf")) returned 1 [0062.158] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\014Ap8HQu4NHe3 TneKR.swf.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\014Ap8HQu4NHe3 TneKR.swf.sad", lpFilePart=0x0) returned 0x63 [0062.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0062.158] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\014Ap8HQu4NHe3 TneKR.swf.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\jswzjis-qn-ls9cikx6g\\014ap8hqu4nhe3 tnekr.swf.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0062.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0062.161] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0062.161] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0062.161] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0062.161] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0062.162] DrawTextExW (in: hdc=0x8010893, lpchText="155 Files\r\nEncrypted", cchText=20, lprc=0x14daf8, format=0x2400, lpdtp=0x21e3b38 | out: lpchText="155 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0062.162] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0062.162] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0062.162] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0062.162] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0062.162] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0062.162] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0062.162] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\3JR6Swb1MoF.mkv", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\3JR6Swb1MoF.mkv", lpFilePart=0x0) returned 0x56 [0062.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0062.162] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\3JR6Swb1MoF.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\jswzjis-qn-ls9cikx6g\\3jr6swb1mof.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0062.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0062.162] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x18e0a [0062.162] ReadFile (in: hFile=0x270, lpBuffer=0x12166978, nNumberOfBytesToRead=0x18e0a, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x12166978*, lpNumberOfBytesRead=0x14dd58*=0x18e0a, lpOverlapped=0x0) returned 1 [0062.164] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\3JR6Swb1MoF.mkv", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\3JR6Swb1MoF.mkv", lpFilePart=0x0) returned 0x56 [0062.164] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\3JR6Swb1MoF.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\jswzjis-qn-ls9cikx6g\\3jr6swb1mof.mkv")) returned 1 [0062.167] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\3JR6Swb1MoF.mkv.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\3JR6Swb1MoF.mkv.sad", lpFilePart=0x0) returned 0x5a [0062.167] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0062.167] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\3JR6Swb1MoF.mkv.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\jswzjis-qn-ls9cikx6g\\3jr6swb1mof.mkv.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0062.167] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0062.171] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0062.171] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0062.171] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0062.171] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0062.171] DrawTextExW (in: hdc=0x8010893, lpchText="156 Files\r\nEncrypted", cchText=20, lprc=0x14daf8, format=0x2400, lpdtp=0x21e6a18 | out: lpchText="156 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0062.172] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0062.172] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0062.172] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0062.172] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0062.172] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0062.172] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0062.172] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\7cvX4N8phwY.swf", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\7cvX4N8phwY.swf", lpFilePart=0x0) returned 0x56 [0062.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0062.172] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\7cvX4N8phwY.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\jswzjis-qn-ls9cikx6g\\7cvx4n8phwy.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0062.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0062.172] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x16ac8 [0062.172] ReadFile (in: hFile=0x270, lpBuffer=0x121c1d70, nNumberOfBytesToRead=0x16ac8, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x121c1d70*, lpNumberOfBytesRead=0x14dd58*=0x16ac8, lpOverlapped=0x0) returned 1 [0062.174] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\7cvX4N8phwY.swf", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\7cvX4N8phwY.swf", lpFilePart=0x0) returned 0x56 [0062.174] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\7cvX4N8phwY.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\jswzjis-qn-ls9cikx6g\\7cvx4n8phwy.swf")) returned 1 [0062.176] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\7cvX4N8phwY.swf.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\7cvX4N8phwY.swf.sad", lpFilePart=0x0) returned 0x5a [0062.176] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0062.176] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\7cvX4N8phwY.swf.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\jswzjis-qn-ls9cikx6g\\7cvx4n8phwy.swf.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0062.177] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0062.179] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0062.179] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0062.180] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0062.180] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0062.180] DrawTextExW (in: hdc=0x8010893, lpchText="157 Files\r\nEncrypted", cchText=20, lprc=0x14daf8, format=0x2400, lpdtp=0x21e98f8 | out: lpchText="157 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0062.180] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0062.180] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0062.180] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0062.180] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0062.180] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0062.180] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0062.180] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\jqncIlbB.mkv", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\jqncIlbB.mkv", lpFilePart=0x0) returned 0x53 [0062.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0062.180] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\jqncIlbB.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\jswzjis-qn-ls9cikx6g\\jqncilbb.mkv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0062.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0062.180] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x47f [0062.181] ReadFile (in: hFile=0x270, lpBuffer=0x21ea1f0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x21ea1f0*, lpNumberOfBytesRead=0x14dd58*=0x47f, lpOverlapped=0x0) returned 1 [0062.181] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\jqncIlbB.mkv", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\jqncIlbB.mkv", lpFilePart=0x0) returned 0x53 [0062.181] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\jqncIlbB.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\jswzjis-qn-ls9cikx6g\\jqncilbb.mkv")) returned 1 [0062.183] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\jqncIlbB.mkv.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\jqncIlbB.mkv.sad", lpFilePart=0x0) returned 0x57 [0062.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0062.183] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\jqncIlbB.mkv.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\jswzjis-qn-ls9cikx6g\\jqncilbb.mkv.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0062.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0062.184] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0062.184] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0062.184] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0062.184] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0062.184] DrawTextExW (in: hdc=0x8010893, lpchText="158 Files\r\nEncrypted", cchText=20, lprc=0x14daf8, format=0x2400, lpdtp=0x21ee888 | out: lpchText="158 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0062.184] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0062.185] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0062.185] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0062.185] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0062.185] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0062.185] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0062.185] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0062.185] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0062.185] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0062.185] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0062.185] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\uQ-gZj7LQxA2hT.swf", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\uQ-gZj7LQxA2hT.swf", lpFilePart=0x0) returned 0x59 [0062.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0062.185] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\uQ-gZj7LQxA2hT.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\jswzjis-qn-ls9cikx6g\\uq-gzj7lqxa2ht.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0062.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0062.185] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0xec83 [0062.185] ReadFile (in: hFile=0x270, lpBuffer=0x21eef10, nNumberOfBytesToRead=0xec83, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x21eef10*, lpNumberOfBytesRead=0x14dd58*=0xec83, lpOverlapped=0x0) returned 1 [0062.187] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\uQ-gZj7LQxA2hT.swf", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\uQ-gZj7LQxA2hT.swf", lpFilePart=0x0) returned 0x59 [0062.187] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\uQ-gZj7LQxA2hT.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\jswzjis-qn-ls9cikx6g\\uq-gzj7lqxa2ht.swf")) returned 1 [0062.188] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\uQ-gZj7LQxA2hT.swf.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\uQ-gZj7LQxA2hT.swf.sad", lpFilePart=0x0) returned 0x5d [0062.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0062.188] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\uQ-gZj7LQxA2hT.swf.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\jswzjis-qn-ls9cikx6g\\uq-gzj7lqxa2ht.swf.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0062.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0062.191] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0062.191] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0062.191] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0062.191] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0062.191] DrawTextExW (in: hdc=0x8010893, lpchText="159 Files\r\nEncrypted", cchText=20, lprc=0x14daf8, format=0x2400, lpdtp=0x2200648 | out: lpchText="159 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0062.192] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0062.192] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0062.192] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0062.192] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0062.192] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0062.192] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0062.192] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\XBl_JDjruWNfdGgXj.avi", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\XBl_JDjruWNfdGgXj.avi", lpFilePart=0x0) returned 0x5c [0062.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0062.192] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\XBl_JDjruWNfdGgXj.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\jswzjis-qn-ls9cikx6g\\xbl_jdjruwnfdggxj.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0062.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0062.192] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x8c62 [0062.192] ReadFile (in: hFile=0x270, lpBuffer=0x2200ae0, nNumberOfBytesToRead=0x8c62, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x2200ae0*, lpNumberOfBytesRead=0x14dd58*=0x8c62, lpOverlapped=0x0) returned 1 [0062.193] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\XBl_JDjruWNfdGgXj.avi", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\XBl_JDjruWNfdGgXj.avi", lpFilePart=0x0) returned 0x5c [0062.193] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\XBl_JDjruWNfdGgXj.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\jswzjis-qn-ls9cikx6g\\xbl_jdjruwnfdggxj.avi")) returned 1 [0062.195] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\XBl_JDjruWNfdGgXj.avi.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\XBl_JDjruWNfdGgXj.avi.sad", lpFilePart=0x0) returned 0x60 [0062.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0062.195] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\XBl_JDjruWNfdGgXj.avi.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\jswzjis-qn-ls9cikx6g\\xbl_jdjruwnfdggxj.avi.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0062.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0062.198] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0062.198] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0062.198] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0062.198] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0062.198] DrawTextExW (in: hdc=0x8010893, lpchText="160 Files\r\nEncrypted", cchText=20, lprc=0x14daf8, format=0x2400, lpdtp=0x220c218 | out: lpchText="160 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0062.199] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0062.199] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0062.199] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0062.199] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0062.199] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0062.199] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0062.199] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\XwHIHu.avi", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\XwHIHu.avi", lpFilePart=0x0) returned 0x51 [0062.199] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0062.199] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\XwHIHu.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\jswzjis-qn-ls9cikx6g\\xwhihu.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0062.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0062.199] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0x1513 [0062.199] ReadFile (in: hFile=0x270, lpBuffer=0x220c668, nNumberOfBytesToRead=0x1513, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x220c668*, lpNumberOfBytesRead=0x14dd58*=0x1513, lpOverlapped=0x0) returned 1 [0062.200] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\XwHIHu.avi", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\XwHIHu.avi", lpFilePart=0x0) returned 0x51 [0062.200] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\XwHIHu.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\jswzjis-qn-ls9cikx6g\\xwhihu.avi")) returned 1 [0062.201] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\XwHIHu.avi.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\XwHIHu.avi.sad", lpFilePart=0x0) returned 0x55 [0062.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0062.201] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\XwHIHu.avi.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\jswzjis-qn-ls9cikx6g\\xwhihu.avi.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0062.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0062.203] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0062.203] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0062.203] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0062.203] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0062.203] DrawTextExW (in: hdc=0x8010893, lpchText="161 Files\r\nEncrypted", cchText=20, lprc=0x14daf8, format=0x2400, lpdtp=0x2213e48 | out: lpchText="161 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0062.203] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0062.203] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0062.203] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0062.203] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0062.203] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0062.203] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0062.203] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\_P7HlGc46RDZHYyRQXF.flv", nBufferLength=0x105, lpBuffer=0x14d7b0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\_P7HlGc46RDZHYyRQXF.flv", lpFilePart=0x0) returned 0x5e [0062.203] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dc90) returned 1 [0062.203] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\_P7HlGc46RDZHYyRQXF.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\jswzjis-qn-ls9cikx6g\\_p7hlgc46rdzhyyrqxf.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0062.204] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc00) returned 1 [0062.204] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14de28 | out: lpFileSizeHigh=0x14de28*=0x0) returned 0xbce8 [0062.204] ReadFile (in: hFile=0x270, lpBuffer=0x22142e0, nNumberOfBytesToRead=0xbce8, lpNumberOfBytesRead=0x14dd58, lpOverlapped=0x0 | out: lpBuffer=0x22142e0*, lpNumberOfBytesRead=0x14dd58*=0xbce8, lpOverlapped=0x0) returned 1 [0062.205] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\_P7HlGc46RDZHYyRQXF.flv", nBufferLength=0x105, lpBuffer=0x14d950, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\_P7HlGc46RDZHYyRQXF.flv", lpFilePart=0x0) returned 0x5e [0062.205] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\_P7HlGc46RDZHYyRQXF.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\jswzjis-qn-ls9cikx6g\\_p7hlgc46rdzhyyrqxf.flv")) returned 1 [0062.207] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\_P7HlGc46RDZHYyRQXF.flv.sad", nBufferLength=0x105, lpBuffer=0x14d6f0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\_P7HlGc46RDZHYyRQXF.flv.sad", lpFilePart=0x0) returned 0x62 [0062.207] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dbd0) returned 1 [0062.207] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\_P7HlGc46RDZHYyRQXF.flv.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\-ayfguvuod1w\\jswzjis-qn-ls9cikx6g\\_p7hlgc46rdzhyyrqxf.flv.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0062.207] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14db40) returned 1 [0062.209] GetCurrentActCtx (in: lphActCtx=0x14de20 | out: lphActCtx=0x14de20*=0xa52648) returned 1 [0062.209] PeekMessageW (in: lpMsg=0x14dd70, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14dd70) returned 0 [0062.210] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0062.210] AdjustWindowRectEx (in: lpRect=0x14db88, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14db88) returned 1 [0062.210] DrawTextExW (in: hdc=0x8010893, lpchText="162 Files\r\nEncrypted", cchText=20, lprc=0x14daf8, format=0x2400, lpdtp=0x2222a98 | out: lpchText="162 Files\r\nEncrypted", lprc=0x14daf8) returned 26 [0062.210] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0062.210] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0062.210] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0062.210] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0062.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14df70) returned 1 [0062.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G", lpFilePart=0x0) returned 0x46 [0062.210] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\", nBufferLength=0x105, lpBuffer=0x14da00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\", lpFilePart=0x0) returned 0x47 [0062.210] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\-AYFGuvUOD1W\\jSWzjIS-Qn-Ls9CiKx6G\\*", lpFindFileData=0x14dc10 | out: lpFindFileData=0x14dc10) returned 0xa748e0 [0062.210] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0062.211] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0062.211] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0062.211] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0062.211] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0062.211] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0062.211] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0062.212] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0062.212] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0062.212] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 1 [0062.212] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dc60 | out: lpFindFileData=0x14dc60) returned 0 [0062.212] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0062.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dec0) returned 1 [0062.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de80) returned 1 [0062.213] GetCurrentActCtx (in: lphActCtx=0x14dfe0 | out: lphActCtx=0x14dfe0*=0xa52648) returned 1 [0062.213] PeekMessageW (in: lpMsg=0x14df30, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df30) returned 0 [0062.213] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0062.213] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0062.213] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0062.213] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0062.213] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0062.213] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0062.213] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0062.213] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0062.213] GetCurrentActCtx (in: lphActCtx=0x14e310 | out: lphActCtx=0x14e310*=0xa52648) returned 1 [0062.213] PeekMessageW (in: lpMsg=0x14e260, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e260) returned 0 [0062.213] GetWindowTextLengthW (hWnd=0x3019e) returned 36 [0062.213] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x24 [0062.213] GetSystemMetrics (nIndex=42) returned 0 [0062.213] GetWindowTextW (in: hWnd=0x3019e, lpString=0x14e1c0, nMaxCount=37 | out: lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos") returned 36 [0062.213] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xd, wParam=0x25, lParam=0x14e1c0) returned 0x24 [0062.213] GetWindowTextLengthW (hWnd=0x3019e) returned 36 [0062.213] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x24 [0062.213] GetSystemMetrics (nIndex=42) returned 0 [0062.213] GetWindowTextW (in: hWnd=0x3019e, lpString=0x14e160, nMaxCount=37 | out: lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos") returned 36 [0062.213] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xd, wParam=0x25, lParam=0x14e160) returned 0x24 [0062.213] SetWindowTextW (hWnd=0x3019e, lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1 [0062.213] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xc, wParam=0x0, lParam=0x2124c3c) returned 0x1 [0062.395] GetStockObject (i=5) returned 0x1900015 [0062.395] GetDlgItem (hDlg=0x301d2, nIDDlgItem=197022) returned 0x3019e [0062.395] SendMessageW (hWnd=0x3019e, Msg=0x202b, wParam=0x3019e, lParam=0x14da50) returned 0x0 [0062.395] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x202b, wParam=0x3019e, lParam=0x14da50) returned 0x0 [0062.395] GetWindowTextLengthW (hWnd=0x3019e) returned 37 [0062.395] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x25 [0062.395] GetSystemMetrics (nIndex=42) returned 0 [0062.395] GetWindowTextW (in: hWnd=0x3019e, lpString=0x14e020, nMaxCount=38 | out: lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 37 [0062.395] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xd, wParam=0x26, lParam=0x14e020) returned 0x25 [0062.396] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0062.396] AdjustWindowRectEx (in: lpRect=0x14e078, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e078) returned 1 [0062.396] DrawTextExW (in: hdc=0x8010893, lpchText="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", cchText=37, lprc=0x14dfe8, format=0x102400, lpdtp=0x22257d0 | out: lpchText="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lprc=0x14dfe8) returned 13 [0062.396] SetWindowPos (hWnd=0x3019e, hWndInsertAfter=0x0, X=12, Y=101, cx=217, cy=13, uFlags=0x16) returned 1 [0062.396] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x46, wParam=0x0, lParam=0x14e020) returned 0x0 [0062.396] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x83, wParam=0x1, lParam=0x14dff0) returned 0x0 [0062.397] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x47, wParam=0x0, lParam=0x14e020) returned 0x0 [0062.397] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0x5, wParam=0x0, lParam=0xd00d9) returned 0x0 [0062.397] GetClientRect (in: hWnd=0x3019e, lpRect=0x14da50 | out: lpRect=0x14da50) returned 1 [0062.397] GetWindowRect (in: hWnd=0x3019e, lpRect=0x14da50 | out: lpRect=0x14da50) returned 1 [0062.397] GetParent (hWnd=0x3019e) returned 0x301d2 [0062.397] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x301d2, lpPoints=0x14da50, cPoints=0x2 | out: lpPoints=0x14da50) returned 2097184000 [0062.397] InvalidateRect (hWnd=0x3019e, lpRect=0x0, bErase=1) returned 1 [0062.397] GetWindowTextLengthW (hWnd=0x3019e) returned 37 [0062.397] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x25 [0062.397] GetSystemMetrics (nIndex=42) returned 0 [0062.397] GetWindowTextW (in: hWnd=0x3019e, lpString=0x14d690, nMaxCount=38 | out: lpString="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 37 [0062.397] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x3019e, Msg=0xd, wParam=0x26, lParam=0x14d690) returned 0x25 [0062.397] GetParent (hWnd=0x3019e) returned 0x301d2 [0062.398] InvalidateRect (hWnd=0x3019e, lpRect=0x0, bErase=1) returned 1 [0062.398] GetWindowTextLengthW (hWnd=0x301d2) returned 12 [0062.398] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0062.398] GetSystemMetrics (nIndex=42) returned 0 [0062.398] GetWindowTextW (in: hWnd=0x301d2, lpString=0x14dfd0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0062.398] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0xd, wParam=0xd, lParam=0x14dfd0) returned 0xc [0062.398] GetCurrentActCtx (in: lphActCtx=0x14e310 | out: lphActCtx=0x14e310*=0xa52648) returned 1 [0062.398] PeekMessageW (in: lpMsg=0x14e260, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e260) returned 1 [0062.398] PeekMessageW (in: lpMsg=0x2116508, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2116508) returned 1 [0062.398] IsWindowUnicode (hWnd=0x301ee) returned 1 [0062.398] GetMessageW (in: lpMsg=0x14e260, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14e260) returned 1 [0062.398] TranslateMessage (lpMsg=0x14e260) returned 0 [0062.398] DispatchMessageW (lpMsg=0x14e260) returned 0x0 [0062.400] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0062.400] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0062.400] CoTaskMemFree (pv=0xa692f0) [0062.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0062.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0062.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14da90) returned 1 [0062.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14db70 | out: lpFileInformation=0x14db70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0062.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14da50) returned 1 [0062.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14d4d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0062.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14d9b0) returned 1 [0062.400] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0062.401] GetFileType (hFile=0x270) returned 0x1 [0062.401] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d920) returned 1 [0062.401] GetFileType (hFile=0x270) returned 0x1 [0062.401] ReadFile (in: hFile=0x270, lpBuffer=0x2227958, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14da88, lpOverlapped=0x0 | out: lpBuffer=0x2227958*, lpNumberOfBytesRead=0x14da88*=0x1, lpOverlapped=0x0) returned 1 [0062.401] ReadFile (in: hFile=0x270, lpBuffer=0x2227958, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14da88, lpOverlapped=0x0 | out: lpBuffer=0x2227958*, lpNumberOfBytesRead=0x14da88*=0x0, lpOverlapped=0x0) returned 1 [0062.401] CloseHandle (hObject=0x270) returned 1 [0062.402] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0062.402] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0062.402] CoTaskMemFree (pv=0xa692f0) [0062.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14d500, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0062.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14d650, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0062.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14da90) returned 1 [0062.403] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14db70 | out: lpFileInformation=0x14db70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0062.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14da50) returned 1 [0062.403] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14d490, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0062.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14d970) returned 1 [0062.403] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0062.404] GetFileType (hFile=0x270) returned 0x1 [0062.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d8e0) returned 1 [0062.404] GetFileType (hFile=0x270) returned 0x1 [0062.404] WriteFile (in: hFile=0x270, lpBuffer=0x222aca8*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x14d9b8, lpOverlapped=0x0 | out: lpBuffer=0x222aca8*, lpNumberOfBytesWritten=0x14d9b8*=0x1, lpOverlapped=0x0) returned 1 [0062.405] CloseHandle (hObject=0x270) returned 1 [0062.406] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0062.406] AdjustWindowRectEx (in: lpRect=0x14d928, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d928) returned 1 [0062.406] SelectObject (hdc=0x8010893, h=0x200a0899) returned 0xb0a087e [0062.406] DrawTextExW (in: hdc=0x8010893, lpchText="4:58", cchText=4, lprc=0x14d898, format=0x2400, lpdtp=0x222bd20 | out: lpchText="4:58", lprc=0x14d898) returned 20 [0062.407] PeekMessageW (in: lpMsg=0x14e260, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e260) returned 0 [0062.407] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0062.407] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0062.407] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14dad0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x3a [0062.407] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dfb0) returned 1 [0062.407] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0062.409] GetFileType (hFile=0x270) returned 0x1 [0062.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14df20) returned 1 [0062.409] GetFileType (hFile=0x270) returned 0x1 [0062.409] WriteFile (in: hFile=0x270, lpBuffer=0x222d4f8*, nNumberOfBytesToWrite=0x119, lpNumberOfBytesWritten=0x14dff8, lpOverlapped=0x0 | out: lpBuffer=0x222d4f8*, lpNumberOfBytesWritten=0x14dff8*=0x119, lpOverlapped=0x0) returned 1 [0062.410] CloseHandle (hObject=0x270) returned 1 [0062.410] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0062.410] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0062.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e190) returned 1 [0062.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x14dc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0062.410] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x14dc20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0062.410] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x14de30 | out: lpFindFileData=0x14de30) returned 0xa748e0 [0062.411] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.411] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.411] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.411] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.411] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.411] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.412] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.412] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.412] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.412] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.412] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.412] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.412] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.413] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.413] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.413] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.413] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.413] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.413] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.413] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.413] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.414] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.414] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.414] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.414] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.414] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.415] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.415] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.415] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.415] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.415] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.415] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.415] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.416] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.416] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.416] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0062.416] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 0 [0062.416] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0062.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e0e0) returned 1 [0062.416] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e0a0) returned 1 [0062.416] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0062.417] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0062.417] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0062.417] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0062.417] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-uBIrwVREIUZMo.mp4", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-uBIrwVREIUZMo.mp4", lpFilePart=0x0) returned 0x38 [0062.417] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0062.417] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-uBIrwVREIUZMo.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-ubirwvreiuzmo.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0062.417] GetFileType (hFile=0x270) returned 0x1 [0062.417] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0062.417] GetFileType (hFile=0x270) returned 0x1 [0062.417] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x5a89 [0062.417] ReadFile (in: hFile=0x270, lpBuffer=0x2233a08, nNumberOfBytesToRead=0x5a89, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x2233a08*, lpNumberOfBytesRead=0x14df78*=0x5a89, lpOverlapped=0x0) returned 1 [0062.418] CloseHandle (hObject=0x270) returned 1 [0062.418] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-uBIrwVREIUZMo.mp4", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-uBIrwVREIUZMo.mp4", lpFilePart=0x0) returned 0x38 [0062.418] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-uBIrwVREIUZMo.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-ubirwvreiuzmo.mp4")) returned 1 [0062.421] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-uBIrwVREIUZMo.mp4.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-uBIrwVREIUZMo.mp4.sad", lpFilePart=0x0) returned 0x3c [0062.421] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0062.421] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\-uBIrwVREIUZMo.mp4.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\-ubirwvreiuzmo.mp4.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0062.421] GetFileType (hFile=0x270) returned 0x1 [0062.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0062.421] GetFileType (hFile=0x270) returned 0x1 [0062.422] WriteFile (in: hFile=0x270, lpBuffer=0x2249e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2249e18*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.423] WriteFile (in: hFile=0x270, lpBuffer=0x2249e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2249e18*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.423] WriteFile (in: hFile=0x270, lpBuffer=0x2249e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2249e18*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.424] WriteFile (in: hFile=0x270, lpBuffer=0x2249e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2249e18*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.424] WriteFile (in: hFile=0x270, lpBuffer=0x2249e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2249e18*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.424] WriteFile (in: hFile=0x270, lpBuffer=0x2249e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2249e18*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.425] WriteFile (in: hFile=0x270, lpBuffer=0x2249e18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2249e18*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.425] WriteFile (in: hFile=0x270, lpBuffer=0x2249e18*, nNumberOfBytesToWrite=0x8b8, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x2249e18*, lpNumberOfBytesWritten=0x14de38*=0x8b8, lpOverlapped=0x0) returned 1 [0062.425] CloseHandle (hObject=0x270) returned 1 [0062.426] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0062.426] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0062.427] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0062.427] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0062.427] SelectObject (hdc=0x8010893, h=0xb0a087e) returned 0x200a0899 [0062.427] DrawTextExW (in: hdc=0x8010893, lpchText="163 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x224b040 | out: lpchText="163 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0062.427] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0062.427] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0062.427] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0062.427] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0062.427] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0062.427] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0062.427] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\09phH.csv", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\09phH.csv", lpFilePart=0x0) returned 0x2f [0062.427] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0062.427] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\09phH.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\09phh.csv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0062.428] GetFileType (hFile=0x270) returned 0x1 [0062.428] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0062.428] GetFileType (hFile=0x270) returned 0x1 [0062.428] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x15f56 [0062.428] ReadFile (in: hFile=0x270, lpBuffer=0x122735b8, nNumberOfBytesToRead=0x15f56, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x122735b8*, lpNumberOfBytesRead=0x14df78*=0x15f56, lpOverlapped=0x0) returned 1 [0062.429] CloseHandle (hObject=0x270) returned 1 [0062.429] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\09phH.csv", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\09phH.csv", lpFilePart=0x0) returned 0x2f [0062.429] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\09phH.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\09phh.csv")) returned 1 [0062.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\09phH.csv.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\09phH.csv.sad", lpFilePart=0x0) returned 0x33 [0062.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0062.432] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\09phH.csv.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\09phh.csv.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0062.433] GetFileType (hFile=0x270) returned 0x1 [0062.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0062.433] GetFileType (hFile=0x270) returned 0x1 [0062.433] WriteFile (in: hFile=0x270, lpBuffer=0x224cbc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x224cbc8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.434] WriteFile (in: hFile=0x270, lpBuffer=0x224cbc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x224cbc8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.435] WriteFile (in: hFile=0x270, lpBuffer=0x224cbc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x224cbc8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.435] WriteFile (in: hFile=0x270, lpBuffer=0x224cbc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x224cbc8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.435] WriteFile (in: hFile=0x270, lpBuffer=0x224cbc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x224cbc8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.436] WriteFile (in: hFile=0x270, lpBuffer=0x224cbc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x224cbc8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.436] WriteFile (in: hFile=0x270, lpBuffer=0x224cbc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x224cbc8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.436] WriteFile (in: hFile=0x270, lpBuffer=0x224cbc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x224cbc8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.437] WriteFile (in: hFile=0x270, lpBuffer=0x224cbc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x224cbc8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.437] WriteFile (in: hFile=0x270, lpBuffer=0x224cbc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x224cbc8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.437] WriteFile (in: hFile=0x270, lpBuffer=0x224cbc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x224cbc8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.438] WriteFile (in: hFile=0x270, lpBuffer=0x224cbc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x224cbc8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.438] WriteFile (in: hFile=0x270, lpBuffer=0x224cbc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x224cbc8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.438] WriteFile (in: hFile=0x270, lpBuffer=0x224cbc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x224cbc8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.439] WriteFile (in: hFile=0x270, lpBuffer=0x224cbc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x224cbc8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.439] WriteFile (in: hFile=0x270, lpBuffer=0x224cbc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x224cbc8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.439] WriteFile (in: hFile=0x270, lpBuffer=0x224cbc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x224cbc8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.439] WriteFile (in: hFile=0x270, lpBuffer=0x224cbc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x224cbc8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.440] WriteFile (in: hFile=0x270, lpBuffer=0x224cbc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x224cbc8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.440] WriteFile (in: hFile=0x270, lpBuffer=0x224cbc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x224cbc8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.440] WriteFile (in: hFile=0x270, lpBuffer=0x224cbc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x224cbc8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.441] WriteFile (in: hFile=0x270, lpBuffer=0x224cbc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x224cbc8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.441] WriteFile (in: hFile=0x270, lpBuffer=0x224cbc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x224cbc8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.441] WriteFile (in: hFile=0x270, lpBuffer=0x224cbc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x224cbc8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.441] WriteFile (in: hFile=0x270, lpBuffer=0x224cbc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x224cbc8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.441] WriteFile (in: hFile=0x270, lpBuffer=0x224cbc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x224cbc8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.442] WriteFile (in: hFile=0x270, lpBuffer=0x224cbc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x224cbc8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.442] WriteFile (in: hFile=0x270, lpBuffer=0x224cbc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x224cbc8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.442] WriteFile (in: hFile=0x270, lpBuffer=0x224cbc8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x224cbc8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0062.442] WriteFile (in: hFile=0x270, lpBuffer=0x224cbc8*, nNumberOfBytesToWrite=0x474, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x224cbc8*, lpNumberOfBytesWritten=0x14de38*=0x474, lpOverlapped=0x0) returned 1 [0062.443] CloseHandle (hObject=0x270) returned 1 [0064.239] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.239] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.239] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0064.239] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0064.239] DrawTextExW (in: hdc=0x8010893, lpchText="164 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x224ddf0 | out: lpchText="164 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0064.239] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.239] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.239] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.239] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.240] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.240] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.240] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\25N6fArGiAF_RUFFp-W.flv", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\25N6fArGiAF_RUFFp-W.flv", lpFilePart=0x0) returned 0x3d [0064.240] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0064.240] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\25N6fArGiAF_RUFFp-W.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\25n6fargiaf_ruffp-w.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0064.240] GetFileType (hFile=0x270) returned 0x1 [0064.240] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0064.240] GetFileType (hFile=0x270) returned 0x1 [0064.241] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0xff70 [0064.241] ReadFile (in: hFile=0x270, lpBuffer=0x224e248, nNumberOfBytesToRead=0xff70, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x224e248*, lpNumberOfBytesRead=0x14df78*=0xff70, lpOverlapped=0x0) returned 1 [0064.242] CloseHandle (hObject=0x270) returned 1 [0064.242] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\25N6fArGiAF_RUFFp-W.flv", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\25N6fArGiAF_RUFFp-W.flv", lpFilePart=0x0) returned 0x3d [0064.242] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\25N6fArGiAF_RUFFp-W.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\25n6fargiaf_ruffp-w.flv")) returned 1 [0064.244] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\25N6fArGiAF_RUFFp-W.flv.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\25N6fArGiAF_RUFFp-W.flv.sad", lpFilePart=0x0) returned 0x41 [0064.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0064.245] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\25N6fArGiAF_RUFFp-W.flv.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\25n6fargiaf_ruffp-w.flv.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0064.245] GetFileType (hFile=0x270) returned 0x1 [0064.245] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0064.245] GetFileType (hFile=0x270) returned 0x1 [0064.246] WriteFile (in: hFile=0x270, lpBuffer=0x225f9c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225f9c8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.247] WriteFile (in: hFile=0x270, lpBuffer=0x225f9c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225f9c8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.247] WriteFile (in: hFile=0x270, lpBuffer=0x225f9c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225f9c8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.248] WriteFile (in: hFile=0x270, lpBuffer=0x225f9c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225f9c8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.248] WriteFile (in: hFile=0x270, lpBuffer=0x225f9c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225f9c8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.248] WriteFile (in: hFile=0x270, lpBuffer=0x225f9c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225f9c8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.249] WriteFile (in: hFile=0x270, lpBuffer=0x225f9c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225f9c8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.249] WriteFile (in: hFile=0x270, lpBuffer=0x225f9c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225f9c8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.249] WriteFile (in: hFile=0x270, lpBuffer=0x225f9c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225f9c8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.250] WriteFile (in: hFile=0x270, lpBuffer=0x225f9c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225f9c8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.250] WriteFile (in: hFile=0x270, lpBuffer=0x225f9c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225f9c8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.250] WriteFile (in: hFile=0x270, lpBuffer=0x225f9c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225f9c8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.251] WriteFile (in: hFile=0x270, lpBuffer=0x225f9c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225f9c8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.251] WriteFile (in: hFile=0x270, lpBuffer=0x225f9c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225f9c8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.251] WriteFile (in: hFile=0x270, lpBuffer=0x225f9c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225f9c8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.252] WriteFile (in: hFile=0x270, lpBuffer=0x225f9c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225f9c8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.252] WriteFile (in: hFile=0x270, lpBuffer=0x225f9c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225f9c8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.253] WriteFile (in: hFile=0x270, lpBuffer=0x225f9c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225f9c8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.253] WriteFile (in: hFile=0x270, lpBuffer=0x225f9c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225f9c8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.253] WriteFile (in: hFile=0x270, lpBuffer=0x225f9c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225f9c8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.254] WriteFile (in: hFile=0x270, lpBuffer=0x225f9c8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x225f9c8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.254] WriteFile (in: hFile=0x270, lpBuffer=0x225f9c8*, nNumberOfBytesToWrite=0x498, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x225f9c8*, lpNumberOfBytesWritten=0x14de38*=0x498, lpOverlapped=0x0) returned 1 [0064.254] CloseHandle (hObject=0x270) returned 1 [0064.263] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.263] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.263] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0064.263] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0064.263] DrawTextExW (in: hdc=0x8010893, lpchText="165 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x2260bc8 | out: lpchText="165 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0064.264] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.264] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.264] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.264] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.264] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.264] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.264] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\32FaXJC4mKqjI.xlsx", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\32FaXJC4mKqjI.xlsx", lpFilePart=0x0) returned 0x38 [0064.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0064.264] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\32FaXJC4mKqjI.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\32faxjc4mkqji.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0064.264] GetFileType (hFile=0x270) returned 0x1 [0064.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0064.264] GetFileType (hFile=0x270) returned 0x1 [0064.264] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x16678 [0064.265] ReadFile (in: hFile=0x270, lpBuffer=0x122ee7e0, nNumberOfBytesToRead=0x16678, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x122ee7e0*, lpNumberOfBytesRead=0x14df78*=0x16678, lpOverlapped=0x0) returned 1 [0064.266] CloseHandle (hObject=0x270) returned 1 [0064.266] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\32FaXJC4mKqjI.xlsx", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\32FaXJC4mKqjI.xlsx", lpFilePart=0x0) returned 0x38 [0064.266] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\32FaXJC4mKqjI.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\32faxjc4mkqji.xlsx")) returned 1 [0064.268] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\32FaXJC4mKqjI.xlsx.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\32FaXJC4mKqjI.xlsx.sad", lpFilePart=0x0) returned 0x3c [0064.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0064.269] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\32FaXJC4mKqjI.xlsx.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\32faxjc4mkqji.xlsx.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0064.269] GetFileType (hFile=0x270) returned 0x1 [0064.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0064.269] GetFileType (hFile=0x270) returned 0x1 [0064.270] WriteFile (in: hFile=0x270, lpBuffer=0x22627e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22627e0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.271] WriteFile (in: hFile=0x270, lpBuffer=0x22627e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22627e0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.271] WriteFile (in: hFile=0x270, lpBuffer=0x22627e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22627e0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.271] WriteFile (in: hFile=0x270, lpBuffer=0x22627e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22627e0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.272] WriteFile (in: hFile=0x270, lpBuffer=0x22627e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22627e0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.272] WriteFile (in: hFile=0x270, lpBuffer=0x22627e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22627e0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.272] WriteFile (in: hFile=0x270, lpBuffer=0x22627e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22627e0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.273] WriteFile (in: hFile=0x270, lpBuffer=0x22627e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22627e0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.273] WriteFile (in: hFile=0x270, lpBuffer=0x22627e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22627e0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.273] WriteFile (in: hFile=0x270, lpBuffer=0x22627e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22627e0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.274] WriteFile (in: hFile=0x270, lpBuffer=0x22627e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22627e0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.274] WriteFile (in: hFile=0x270, lpBuffer=0x22627e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22627e0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.274] WriteFile (in: hFile=0x270, lpBuffer=0x22627e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22627e0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.275] WriteFile (in: hFile=0x270, lpBuffer=0x22627e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22627e0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.275] WriteFile (in: hFile=0x270, lpBuffer=0x22627e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22627e0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.276] WriteFile (in: hFile=0x270, lpBuffer=0x22627e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22627e0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.276] WriteFile (in: hFile=0x270, lpBuffer=0x22627e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22627e0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.276] WriteFile (in: hFile=0x270, lpBuffer=0x22627e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22627e0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.277] WriteFile (in: hFile=0x270, lpBuffer=0x22627e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22627e0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.277] WriteFile (in: hFile=0x270, lpBuffer=0x22627e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22627e0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.277] WriteFile (in: hFile=0x270, lpBuffer=0x22627e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22627e0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.278] WriteFile (in: hFile=0x270, lpBuffer=0x22627e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22627e0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.278] WriteFile (in: hFile=0x270, lpBuffer=0x22627e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22627e0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.278] WriteFile (in: hFile=0x270, lpBuffer=0x22627e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22627e0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.279] WriteFile (in: hFile=0x270, lpBuffer=0x22627e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22627e0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.279] WriteFile (in: hFile=0x270, lpBuffer=0x22627e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22627e0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.279] WriteFile (in: hFile=0x270, lpBuffer=0x22627e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22627e0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.280] WriteFile (in: hFile=0x270, lpBuffer=0x22627e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22627e0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.280] WriteFile (in: hFile=0x270, lpBuffer=0x22627e0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22627e0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.280] WriteFile (in: hFile=0x270, lpBuffer=0x22627e0*, nNumberOfBytesToWrite=0xdf8, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x22627e0*, lpNumberOfBytesWritten=0x14de38*=0xdf8, lpOverlapped=0x0) returned 1 [0064.280] CloseHandle (hObject=0x270) returned 1 [0064.285] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.285] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.285] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0064.285] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0064.285] DrawTextExW (in: hdc=0x8010893, lpchText="166 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x22639e0 | out: lpchText="166 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0064.285] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.286] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.286] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.286] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.286] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.286] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.286] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\36KieJDDp.wav", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\36KieJDDp.wav", lpFilePart=0x0) returned 0x33 [0064.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0064.286] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\36KieJDDp.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\36kiejddp.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0064.289] GetFileType (hFile=0x270) returned 0x1 [0064.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0064.289] GetFileType (hFile=0x270) returned 0x1 [0064.289] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x17ecc [0064.290] ReadFile (in: hFile=0x270, lpBuffer=0x12340ac0, nNumberOfBytesToRead=0x17ecc, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x12340ac0*, lpNumberOfBytesRead=0x14df78*=0x17ecc, lpOverlapped=0x0) returned 1 [0064.291] CloseHandle (hObject=0x270) returned 1 [0064.291] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\36KieJDDp.wav", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\36KieJDDp.wav", lpFilePart=0x0) returned 0x33 [0064.291] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\36KieJDDp.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\36kiejddp.wav")) returned 1 [0064.293] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\36KieJDDp.wav.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\36KieJDDp.wav.sad", lpFilePart=0x0) returned 0x37 [0064.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0064.293] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\36KieJDDp.wav.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\36kiejddp.wav.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0064.294] GetFileType (hFile=0x270) returned 0x1 [0064.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0064.294] GetFileType (hFile=0x270) returned 0x1 [0064.294] WriteFile (in: hFile=0x270, lpBuffer=0x22655a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22655a0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.296] WriteFile (in: hFile=0x270, lpBuffer=0x22655a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22655a0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.296] WriteFile (in: hFile=0x270, lpBuffer=0x22655a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22655a0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.296] WriteFile (in: hFile=0x270, lpBuffer=0x22655a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22655a0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.297] WriteFile (in: hFile=0x270, lpBuffer=0x22655a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22655a0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.297] WriteFile (in: hFile=0x270, lpBuffer=0x22655a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22655a0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.297] WriteFile (in: hFile=0x270, lpBuffer=0x22655a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22655a0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.301] WriteFile (in: hFile=0x270, lpBuffer=0x22655a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22655a0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.301] WriteFile (in: hFile=0x270, lpBuffer=0x22655a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22655a0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.302] WriteFile (in: hFile=0x270, lpBuffer=0x22655a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22655a0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.308] WriteFile (in: hFile=0x270, lpBuffer=0x22655a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22655a0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.315] WriteFile (in: hFile=0x270, lpBuffer=0x22655a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22655a0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.315] WriteFile (in: hFile=0x270, lpBuffer=0x22655a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22655a0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.315] WriteFile (in: hFile=0x270, lpBuffer=0x22655a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22655a0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.316] WriteFile (in: hFile=0x270, lpBuffer=0x22655a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22655a0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.316] WriteFile (in: hFile=0x270, lpBuffer=0x22655a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22655a0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.316] WriteFile (in: hFile=0x270, lpBuffer=0x22655a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22655a0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.316] WriteFile (in: hFile=0x270, lpBuffer=0x22655a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22655a0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.317] WriteFile (in: hFile=0x270, lpBuffer=0x22655a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22655a0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.317] WriteFile (in: hFile=0x270, lpBuffer=0x22655a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22655a0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.317] WriteFile (in: hFile=0x270, lpBuffer=0x22655a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22655a0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.317] WriteFile (in: hFile=0x270, lpBuffer=0x22655a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22655a0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.317] WriteFile (in: hFile=0x270, lpBuffer=0x22655a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22655a0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.318] WriteFile (in: hFile=0x270, lpBuffer=0x22655a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22655a0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.318] WriteFile (in: hFile=0x270, lpBuffer=0x22655a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22655a0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.318] WriteFile (in: hFile=0x270, lpBuffer=0x22655a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22655a0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.319] WriteFile (in: hFile=0x270, lpBuffer=0x22655a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22655a0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.319] WriteFile (in: hFile=0x270, lpBuffer=0x22655a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22655a0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.319] WriteFile (in: hFile=0x270, lpBuffer=0x22655a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22655a0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.319] WriteFile (in: hFile=0x270, lpBuffer=0x22655a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22655a0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.319] WriteFile (in: hFile=0x270, lpBuffer=0x22655a0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22655a0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.320] WriteFile (in: hFile=0x270, lpBuffer=0x22655a0*, nNumberOfBytesToWrite=0xe68, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x22655a0*, lpNumberOfBytesWritten=0x14de38*=0xe68, lpOverlapped=0x0) returned 1 [0064.320] CloseHandle (hObject=0x270) returned 1 [0064.325] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.325] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.326] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0064.326] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0064.326] DrawTextExW (in: hdc=0x8010893, lpchText="167 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x22667a0 | out: lpchText="167 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0064.326] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.326] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.326] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.326] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.326] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.326] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.327] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\46hS31brccWGXQ3.png", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\46hS31brccWGXQ3.png", lpFilePart=0x0) returned 0x39 [0064.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0064.327] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\46hS31brccWGXQ3.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\46hs31brccwgxq3.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0064.327] GetFileType (hFile=0x270) returned 0x1 [0064.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0064.327] GetFileType (hFile=0x270) returned 0x1 [0064.327] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x14c78 [0064.327] ReadFile (in: hFile=0x270, lpBuffer=0x123986d8, nNumberOfBytesToRead=0x14c78, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x123986d8*, lpNumberOfBytesRead=0x14df78*=0x14c78, lpOverlapped=0x0) returned 1 [0064.329] CloseHandle (hObject=0x270) returned 1 [0064.329] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\46hS31brccWGXQ3.png", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\46hS31brccWGXQ3.png", lpFilePart=0x0) returned 0x39 [0064.329] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\46hS31brccWGXQ3.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\46hs31brccwgxq3.png")) returned 1 [0064.333] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\46hS31brccWGXQ3.png.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\46hS31brccWGXQ3.png.sad", lpFilePart=0x0) returned 0x3d [0064.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0064.333] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\46hS31brccWGXQ3.png.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\46hs31brccwgxq3.png.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0064.335] GetFileType (hFile=0x270) returned 0x1 [0064.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0064.335] GetFileType (hFile=0x270) returned 0x1 [0064.335] WriteFile (in: hFile=0x270, lpBuffer=0x22683b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22683b8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.337] WriteFile (in: hFile=0x270, lpBuffer=0x22683b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22683b8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.337] WriteFile (in: hFile=0x270, lpBuffer=0x22683b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22683b8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.337] WriteFile (in: hFile=0x270, lpBuffer=0x22683b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22683b8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.338] WriteFile (in: hFile=0x270, lpBuffer=0x22683b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22683b8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.339] WriteFile (in: hFile=0x270, lpBuffer=0x22683b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22683b8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.339] WriteFile (in: hFile=0x270, lpBuffer=0x22683b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22683b8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.339] WriteFile (in: hFile=0x270, lpBuffer=0x22683b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22683b8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.339] WriteFile (in: hFile=0x270, lpBuffer=0x22683b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22683b8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.339] WriteFile (in: hFile=0x270, lpBuffer=0x22683b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22683b8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.340] WriteFile (in: hFile=0x270, lpBuffer=0x22683b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22683b8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.340] WriteFile (in: hFile=0x270, lpBuffer=0x22683b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22683b8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.340] WriteFile (in: hFile=0x270, lpBuffer=0x22683b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22683b8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.340] WriteFile (in: hFile=0x270, lpBuffer=0x22683b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22683b8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.340] WriteFile (in: hFile=0x270, lpBuffer=0x22683b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22683b8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.341] WriteFile (in: hFile=0x270, lpBuffer=0x22683b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22683b8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.341] WriteFile (in: hFile=0x270, lpBuffer=0x22683b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22683b8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.341] WriteFile (in: hFile=0x270, lpBuffer=0x22683b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22683b8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.341] WriteFile (in: hFile=0x270, lpBuffer=0x22683b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22683b8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.341] WriteFile (in: hFile=0x270, lpBuffer=0x22683b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22683b8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.342] WriteFile (in: hFile=0x270, lpBuffer=0x22683b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22683b8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.342] WriteFile (in: hFile=0x270, lpBuffer=0x22683b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22683b8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.342] WriteFile (in: hFile=0x270, lpBuffer=0x22683b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22683b8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.342] WriteFile (in: hFile=0x270, lpBuffer=0x22683b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22683b8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.342] WriteFile (in: hFile=0x270, lpBuffer=0x22683b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22683b8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.343] WriteFile (in: hFile=0x270, lpBuffer=0x22683b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22683b8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.343] WriteFile (in: hFile=0x270, lpBuffer=0x22683b8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22683b8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.343] WriteFile (in: hFile=0x270, lpBuffer=0x22683b8*, nNumberOfBytesToWrite=0xb4c, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x22683b8*, lpNumberOfBytesWritten=0x14de38*=0xb4c, lpOverlapped=0x0) returned 1 [0064.343] CloseHandle (hObject=0x270) returned 1 [0064.346] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.346] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.346] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0064.346] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0064.346] DrawTextExW (in: hdc=0x8010893, lpchText="168 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x22695b8 | out: lpchText="168 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0064.346] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.346] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.346] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.347] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.347] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.347] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.347] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\74ZXEX.rtf", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\74ZXEX.rtf", lpFilePart=0x0) returned 0x30 [0064.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0064.347] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\74ZXEX.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\74zxex.rtf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0064.347] GetFileType (hFile=0x270) returned 0x1 [0064.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0064.347] GetFileType (hFile=0x270) returned 0x1 [0064.347] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0xa844 [0064.347] ReadFile (in: hFile=0x270, lpBuffer=0x22699c8, nNumberOfBytesToRead=0xa844, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x22699c8*, lpNumberOfBytesRead=0x14df78*=0xa844, lpOverlapped=0x0) returned 1 [0064.348] CloseHandle (hObject=0x270) returned 1 [0064.349] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\74ZXEX.rtf", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\74ZXEX.rtf", lpFilePart=0x0) returned 0x30 [0064.349] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\74ZXEX.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\74zxex.rtf")) returned 1 [0064.351] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\74ZXEX.rtf.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\74ZXEX.rtf.sad", lpFilePart=0x0) returned 0x34 [0064.351] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0064.351] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\74ZXEX.rtf.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\74zxex.rtf.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0064.352] GetFileType (hFile=0x270) returned 0x1 [0064.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0064.352] GetFileType (hFile=0x270) returned 0x1 [0064.352] WriteFile (in: hFile=0x270, lpBuffer=0x22759c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22759c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.353] WriteFile (in: hFile=0x270, lpBuffer=0x22759c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22759c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.353] WriteFile (in: hFile=0x270, lpBuffer=0x22759c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22759c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.354] WriteFile (in: hFile=0x270, lpBuffer=0x22759c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22759c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.354] WriteFile (in: hFile=0x270, lpBuffer=0x22759c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22759c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.354] WriteFile (in: hFile=0x270, lpBuffer=0x22759c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22759c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.354] WriteFile (in: hFile=0x270, lpBuffer=0x22759c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22759c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.355] WriteFile (in: hFile=0x270, lpBuffer=0x22759c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22759c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.355] WriteFile (in: hFile=0x270, lpBuffer=0x22759c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22759c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.355] WriteFile (in: hFile=0x270, lpBuffer=0x22759c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22759c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.355] WriteFile (in: hFile=0x270, lpBuffer=0x22759c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22759c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.355] WriteFile (in: hFile=0x270, lpBuffer=0x22759c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22759c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.356] WriteFile (in: hFile=0x270, lpBuffer=0x22759c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x22759c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.356] WriteFile (in: hFile=0x270, lpBuffer=0x22759c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14de58, lpOverlapped=0x0 | out: lpBuffer=0x22759c0*, lpNumberOfBytesWritten=0x14de58*=0x1000, lpOverlapped=0x0) returned 1 [0064.356] WriteFile (in: hFile=0x270, lpBuffer=0x22759c0*, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x22759c0*, lpNumberOfBytesWritten=0x14de38*=0x5c, lpOverlapped=0x0) returned 1 [0064.356] CloseHandle (hObject=0x270) returned 1 [0064.358] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.358] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.358] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0064.358] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0064.358] DrawTextExW (in: hdc=0x8010893, lpchText="169 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x2276bc0 | out: lpchText="169 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0064.358] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.358] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.358] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.358] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.359] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.359] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.359] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B2NU8hp8G9cKZ0nQRu.avi", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B2NU8hp8G9cKZ0nQRu.avi", lpFilePart=0x0) returned 0x3c [0064.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0064.359] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B2NU8hp8G9cKZ0nQRu.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\b2nu8hp8g9ckz0nqru.avi"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0064.359] GetFileType (hFile=0x270) returned 0x1 [0064.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0064.359] GetFileType (hFile=0x270) returned 0x1 [0064.359] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x850a [0064.359] ReadFile (in: hFile=0x270, lpBuffer=0x2277018, nNumberOfBytesToRead=0x850a, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x2277018*, lpNumberOfBytesRead=0x14df78*=0x850a, lpOverlapped=0x0) returned 1 [0064.360] CloseHandle (hObject=0x270) returned 1 [0064.361] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B2NU8hp8G9cKZ0nQRu.avi", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B2NU8hp8G9cKZ0nQRu.avi", lpFilePart=0x0) returned 0x3c [0064.361] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B2NU8hp8G9cKZ0nQRu.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\b2nu8hp8g9ckz0nqru.avi")) returned 1 [0064.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B2NU8hp8G9cKZ0nQRu.avi.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B2NU8hp8G9cKZ0nQRu.avi.sad", lpFilePart=0x0) returned 0x40 [0064.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0064.362] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\B2NU8hp8G9cKZ0nQRu.avi.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\b2nu8hp8g9ckz0nqru.avi.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0064.363] GetFileType (hFile=0x270) returned 0x1 [0064.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0064.363] GetFileType (hFile=0x270) returned 0x1 [0064.363] WriteFile (in: hFile=0x270, lpBuffer=0x2280d38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2280d38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.364] WriteFile (in: hFile=0x270, lpBuffer=0x2280d38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2280d38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.364] WriteFile (in: hFile=0x270, lpBuffer=0x2280d38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2280d38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.365] WriteFile (in: hFile=0x270, lpBuffer=0x2280d38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2280d38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.365] WriteFile (in: hFile=0x270, lpBuffer=0x2280d38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2280d38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.365] WriteFile (in: hFile=0x270, lpBuffer=0x2280d38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2280d38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.365] WriteFile (in: hFile=0x270, lpBuffer=0x2280d38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2280d38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.366] WriteFile (in: hFile=0x270, lpBuffer=0x2280d38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2280d38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.366] WriteFile (in: hFile=0x270, lpBuffer=0x2280d38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2280d38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.366] WriteFile (in: hFile=0x270, lpBuffer=0x2280d38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2280d38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.367] WriteFile (in: hFile=0x270, lpBuffer=0x2280d38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14de58, lpOverlapped=0x0 | out: lpBuffer=0x2280d38*, lpNumberOfBytesWritten=0x14de58*=0x1000, lpOverlapped=0x0) returned 1 [0064.367] WriteFile (in: hFile=0x270, lpBuffer=0x2280d38*, nNumberOfBytesToWrite=0x164, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x2280d38*, lpNumberOfBytesWritten=0x14de38*=0x164, lpOverlapped=0x0) returned 1 [0064.367] CloseHandle (hObject=0x270) returned 1 [0064.368] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.368] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.369] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0064.369] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0064.369] DrawTextExW (in: hdc=0x8010893, lpchText="170 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x2281f38 | out: lpchText="170 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0064.369] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.369] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.369] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.369] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.369] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.369] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.370] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Bcxs3hDt A.gif", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Bcxs3hDt A.gif", lpFilePart=0x0) returned 0x34 [0064.370] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0064.371] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Bcxs3hDt A.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bcxs3hdt a.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0064.371] GetFileType (hFile=0x270) returned 0x1 [0064.371] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0064.371] GetFileType (hFile=0x270) returned 0x1 [0064.371] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x146d3 [0064.371] ReadFile (in: hFile=0x270, lpBuffer=0x2282360, nNumberOfBytesToRead=0x146d3, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x2282360*, lpNumberOfBytesRead=0x14df78*=0x146d3, lpOverlapped=0x0) returned 1 [0064.372] CloseHandle (hObject=0x270) returned 1 [0064.376] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Bcxs3hDt A.gif", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Bcxs3hDt A.gif", lpFilePart=0x0) returned 0x34 [0064.376] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Bcxs3hDt A.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bcxs3hdt a.gif")) returned 1 [0064.383] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Bcxs3hDt A.gif.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Bcxs3hDt A.gif.sad", lpFilePart=0x0) returned 0x38 [0064.383] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0064.383] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Bcxs3hDt A.gif.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\bcxs3hdt a.gif.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0064.384] GetFileType (hFile=0x270) returned 0x1 [0064.384] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0064.384] GetFileType (hFile=0x270) returned 0x1 [0064.384] WriteFile (in: hFile=0x270, lpBuffer=0x2298208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2298208*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.385] WriteFile (in: hFile=0x270, lpBuffer=0x2298208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2298208*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.385] WriteFile (in: hFile=0x270, lpBuffer=0x2298208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2298208*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.386] WriteFile (in: hFile=0x270, lpBuffer=0x2298208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2298208*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.386] WriteFile (in: hFile=0x270, lpBuffer=0x2298208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2298208*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.386] WriteFile (in: hFile=0x270, lpBuffer=0x2298208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2298208*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.386] WriteFile (in: hFile=0x270, lpBuffer=0x2298208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2298208*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.386] WriteFile (in: hFile=0x270, lpBuffer=0x2298208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2298208*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.387] WriteFile (in: hFile=0x270, lpBuffer=0x2298208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2298208*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.387] WriteFile (in: hFile=0x270, lpBuffer=0x2298208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2298208*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.387] WriteFile (in: hFile=0x270, lpBuffer=0x2298208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2298208*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.387] WriteFile (in: hFile=0x270, lpBuffer=0x2298208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2298208*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.387] WriteFile (in: hFile=0x270, lpBuffer=0x2298208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2298208*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.388] WriteFile (in: hFile=0x270, lpBuffer=0x2298208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2298208*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.388] WriteFile (in: hFile=0x270, lpBuffer=0x2298208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2298208*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.388] WriteFile (in: hFile=0x270, lpBuffer=0x2298208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2298208*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.388] WriteFile (in: hFile=0x270, lpBuffer=0x2298208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2298208*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.388] WriteFile (in: hFile=0x270, lpBuffer=0x2298208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2298208*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.389] WriteFile (in: hFile=0x270, lpBuffer=0x2298208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2298208*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.389] WriteFile (in: hFile=0x270, lpBuffer=0x2298208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2298208*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.389] WriteFile (in: hFile=0x270, lpBuffer=0x2298208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2298208*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.389] WriteFile (in: hFile=0x270, lpBuffer=0x2298208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2298208*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.389] WriteFile (in: hFile=0x270, lpBuffer=0x2298208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2298208*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.389] WriteFile (in: hFile=0x270, lpBuffer=0x2298208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2298208*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.390] WriteFile (in: hFile=0x270, lpBuffer=0x2298208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2298208*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.390] WriteFile (in: hFile=0x270, lpBuffer=0x2298208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2298208*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.390] WriteFile (in: hFile=0x270, lpBuffer=0x2298208*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14de58, lpOverlapped=0x0 | out: lpBuffer=0x2298208*, lpNumberOfBytesWritten=0x14de58*=0x1000, lpOverlapped=0x0) returned 1 [0064.390] WriteFile (in: hFile=0x270, lpBuffer=0x2298208*, nNumberOfBytesToWrite=0x3c4, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x2298208*, lpNumberOfBytesWritten=0x14de38*=0x3c4, lpOverlapped=0x0) returned 1 [0064.392] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.392] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.392] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0064.392] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0064.392] DrawTextExW (in: hdc=0x8010893, lpchText="171 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x2299408 | out: lpchText="171 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0064.392] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.392] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.392] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.392] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.393] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.393] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.393] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bTfs6W.xls", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bTfs6W.xls", lpFilePart=0x0) returned 0x30 [0064.393] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0064.393] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bTfs6W.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\btfs6w.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0064.393] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0064.393] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0xd523 [0064.393] ReadFile (in: hFile=0x270, lpBuffer=0x2299818, nNumberOfBytesToRead=0xd523, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x2299818*, lpNumberOfBytesRead=0x14df78*=0xd523, lpOverlapped=0x0) returned 1 [0064.416] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bTfs6W.xls", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bTfs6W.xls", lpFilePart=0x0) returned 0x30 [0064.416] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bTfs6W.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\btfs6w.xls")) returned 1 [0064.418] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bTfs6W.xls.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bTfs6W.xls.sad", lpFilePart=0x0) returned 0x34 [0064.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0064.419] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\bTfs6W.xls.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\btfs6w.xls.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0064.421] GetFileType (hFile=0x270) returned 0x1 [0064.421] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0064.421] GetFileType (hFile=0x270) returned 0x1 [0064.421] WriteFile (in: hFile=0x270, lpBuffer=0x2141450*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2141450*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.423] WriteFile (in: hFile=0x270, lpBuffer=0x2141450*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2141450*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.424] WriteFile (in: hFile=0x270, lpBuffer=0x2141450*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2141450*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.424] WriteFile (in: hFile=0x270, lpBuffer=0x2141450*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2141450*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.424] WriteFile (in: hFile=0x270, lpBuffer=0x2141450*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2141450*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.425] WriteFile (in: hFile=0x270, lpBuffer=0x2141450*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2141450*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.425] WriteFile (in: hFile=0x270, lpBuffer=0x2141450*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2141450*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.425] WriteFile (in: hFile=0x270, lpBuffer=0x2141450*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2141450*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.426] WriteFile (in: hFile=0x270, lpBuffer=0x2141450*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2141450*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.426] WriteFile (in: hFile=0x270, lpBuffer=0x2141450*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2141450*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.427] WriteFile (in: hFile=0x270, lpBuffer=0x2141450*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2141450*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.427] WriteFile (in: hFile=0x270, lpBuffer=0x2141450*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2141450*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.428] WriteFile (in: hFile=0x270, lpBuffer=0x2141450*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2141450*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.428] WriteFile (in: hFile=0x270, lpBuffer=0x2141450*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2141450*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.428] WriteFile (in: hFile=0x270, lpBuffer=0x2141450*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2141450*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.429] WriteFile (in: hFile=0x270, lpBuffer=0x2141450*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2141450*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.429] WriteFile (in: hFile=0x270, lpBuffer=0x2141450*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2141450*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.429] WriteFile (in: hFile=0x270, lpBuffer=0x2141450*, nNumberOfBytesToWrite=0xc30, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x2141450*, lpNumberOfBytesWritten=0x14de38*=0xc30, lpOverlapped=0x0) returned 1 [0064.429] CloseHandle (hObject=0x270) returned 1 [0064.437] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.437] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.437] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0064.437] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0064.437] DrawTextExW (in: hdc=0x8010893, lpchText="172 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x2142650 | out: lpchText="172 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0064.438] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.438] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.438] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.438] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.438] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.438] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.438] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x31 [0064.438] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0064.438] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\desktop.ini"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0064.438] GetFileType (hFile=0x270) returned 0x1 [0064.438] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0064.438] GetFileType (hFile=0x270) returned 0x1 [0064.438] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x11a [0064.438] ReadFile (in: hFile=0x270, lpBuffer=0x2142b98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x2142b98*, lpNumberOfBytesRead=0x14df78*=0x11a, lpOverlapped=0x0) returned 1 [0064.439] CloseHandle (hObject=0x270) returned 1 [0064.439] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.ini", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.ini", lpFilePart=0x0) returned 0x31 [0064.439] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.ini" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\desktop.ini")) returned 1 [0064.441] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.ini.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.ini.sad", lpFilePart=0x0) returned 0x35 [0064.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0064.441] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.ini.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\desktop.ini.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0064.441] GetFileType (hFile=0x270) returned 0x1 [0064.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0064.442] GetFileType (hFile=0x270) returned 0x1 [0064.442] WriteFile (in: hFile=0x270, lpBuffer=0x2145658*, nNumberOfBytesToWrite=0x178, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x2145658*, lpNumberOfBytesWritten=0x14de38*=0x178, lpOverlapped=0x0) returned 1 [0064.443] CloseHandle (hObject=0x270) returned 1 [0064.445] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.445] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.445] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0064.445] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0064.445] DrawTextExW (in: hdc=0x8010893, lpchText="173 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x2146858 | out: lpchText="173 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0064.446] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.446] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.446] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.446] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.446] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.450] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.450] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EF18hID8Ub9_2X_.mp3", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EF18hID8Ub9_2X_.mp3", lpFilePart=0x0) returned 0x39 [0064.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0064.450] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EF18hID8Ub9_2X_.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ef18hid8ub9_2x_.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0064.450] GetFileType (hFile=0x270) returned 0x1 [0064.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0064.450] GetFileType (hFile=0x270) returned 0x1 [0064.450] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x18b9f [0064.451] ReadFile (in: hFile=0x270, lpBuffer=0x12165208, nNumberOfBytesToRead=0x18b9f, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x12165208*, lpNumberOfBytesRead=0x14df78*=0x18b9f, lpOverlapped=0x0) returned 1 [0064.453] CloseHandle (hObject=0x270) returned 1 [0064.457] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EF18hID8Ub9_2X_.mp3", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EF18hID8Ub9_2X_.mp3", lpFilePart=0x0) returned 0x39 [0064.457] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EF18hID8Ub9_2X_.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ef18hid8ub9_2x_.mp3")) returned 1 [0064.460] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EF18hID8Ub9_2X_.mp3.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EF18hID8Ub9_2X_.mp3.sad", lpFilePart=0x0) returned 0x3d [0064.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0064.460] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\EF18hID8Ub9_2X_.mp3.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ef18hid8ub9_2x_.mp3.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0064.461] GetFileType (hFile=0x270) returned 0x1 [0064.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0064.461] GetFileType (hFile=0x270) returned 0x1 [0064.461] WriteFile (in: hFile=0x270, lpBuffer=0x2148470*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2148470*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.463] WriteFile (in: hFile=0x270, lpBuffer=0x2148470*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2148470*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.463] WriteFile (in: hFile=0x270, lpBuffer=0x2148470*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2148470*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.464] WriteFile (in: hFile=0x270, lpBuffer=0x2148470*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2148470*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.464] WriteFile (in: hFile=0x270, lpBuffer=0x2148470*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2148470*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.465] WriteFile (in: hFile=0x270, lpBuffer=0x2148470*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2148470*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.465] WriteFile (in: hFile=0x270, lpBuffer=0x2148470*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2148470*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.465] WriteFile (in: hFile=0x270, lpBuffer=0x2148470*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2148470*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.466] WriteFile (in: hFile=0x270, lpBuffer=0x2148470*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2148470*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.466] WriteFile (in: hFile=0x270, lpBuffer=0x2148470*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2148470*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.467] WriteFile (in: hFile=0x270, lpBuffer=0x2148470*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2148470*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.467] WriteFile (in: hFile=0x270, lpBuffer=0x2148470*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2148470*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.467] WriteFile (in: hFile=0x270, lpBuffer=0x2148470*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2148470*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.468] WriteFile (in: hFile=0x270, lpBuffer=0x2148470*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2148470*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.468] WriteFile (in: hFile=0x270, lpBuffer=0x2148470*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2148470*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.469] WriteFile (in: hFile=0x270, lpBuffer=0x2148470*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2148470*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.469] WriteFile (in: hFile=0x270, lpBuffer=0x2148470*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2148470*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.470] WriteFile (in: hFile=0x270, lpBuffer=0x2148470*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2148470*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.470] WriteFile (in: hFile=0x270, lpBuffer=0x2148470*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2148470*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.470] WriteFile (in: hFile=0x270, lpBuffer=0x2148470*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2148470*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.471] WriteFile (in: hFile=0x270, lpBuffer=0x2148470*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2148470*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.471] WriteFile (in: hFile=0x270, lpBuffer=0x2148470*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2148470*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.472] WriteFile (in: hFile=0x270, lpBuffer=0x2148470*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2148470*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.472] WriteFile (in: hFile=0x270, lpBuffer=0x2148470*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2148470*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.472] WriteFile (in: hFile=0x270, lpBuffer=0x2148470*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2148470*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.473] WriteFile (in: hFile=0x270, lpBuffer=0x2148470*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2148470*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.473] WriteFile (in: hFile=0x270, lpBuffer=0x2148470*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2148470*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.474] WriteFile (in: hFile=0x270, lpBuffer=0x2148470*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2148470*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.474] WriteFile (in: hFile=0x270, lpBuffer=0x2148470*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2148470*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.475] WriteFile (in: hFile=0x270, lpBuffer=0x2148470*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2148470*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.475] WriteFile (in: hFile=0x270, lpBuffer=0x2148470*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2148470*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.475] WriteFile (in: hFile=0x270, lpBuffer=0x2148470*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2148470*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.476] WriteFile (in: hFile=0x270, lpBuffer=0x2148470*, nNumberOfBytesToWrite=0xf80, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x2148470*, lpNumberOfBytesWritten=0x14de38*=0xf80, lpOverlapped=0x0) returned 1 [0064.476] CloseHandle (hObject=0x270) returned 1 [0064.481] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.481] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.481] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0064.481] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0064.481] DrawTextExW (in: hdc=0x8010893, lpchText="174 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x2149670 | out: lpchText="174 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0064.482] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.482] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.482] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.482] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.482] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.482] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.482] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eg_Iq5.png", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eg_Iq5.png", lpFilePart=0x0) returned 0x30 [0064.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0064.482] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eg_Iq5.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eg_iq5.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0064.483] GetFileType (hFile=0x270) returned 0x1 [0064.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0064.483] GetFileType (hFile=0x270) returned 0x1 [0064.483] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0xf372 [0064.483] ReadFile (in: hFile=0x270, lpBuffer=0x2149a80, nNumberOfBytesToRead=0xf372, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x2149a80*, lpNumberOfBytesRead=0x14df78*=0xf372, lpOverlapped=0x0) returned 1 [0064.485] CloseHandle (hObject=0x270) returned 1 [0064.490] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eg_Iq5.png", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eg_Iq5.png", lpFilePart=0x0) returned 0x30 [0064.491] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eg_Iq5.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eg_iq5.png")) returned 1 [0064.494] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eg_Iq5.png.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eg_Iq5.png.sad", lpFilePart=0x0) returned 0x34 [0064.495] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0064.495] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Eg_Iq5.png.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\eg_iq5.png.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0064.496] GetFileType (hFile=0x270) returned 0x1 [0064.496] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0064.497] GetFileType (hFile=0x270) returned 0x1 [0064.498] WriteFile (in: hFile=0x270, lpBuffer=0x215a5a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215a5a8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.500] WriteFile (in: hFile=0x270, lpBuffer=0x215a5a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215a5a8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.501] WriteFile (in: hFile=0x270, lpBuffer=0x215a5a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215a5a8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.502] WriteFile (in: hFile=0x270, lpBuffer=0x215a5a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215a5a8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.502] WriteFile (in: hFile=0x270, lpBuffer=0x215a5a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215a5a8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.503] WriteFile (in: hFile=0x270, lpBuffer=0x215a5a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215a5a8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.504] WriteFile (in: hFile=0x270, lpBuffer=0x215a5a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215a5a8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.505] WriteFile (in: hFile=0x270, lpBuffer=0x215a5a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215a5a8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.506] WriteFile (in: hFile=0x270, lpBuffer=0x215a5a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215a5a8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.506] WriteFile (in: hFile=0x270, lpBuffer=0x215a5a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215a5a8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.507] WriteFile (in: hFile=0x270, lpBuffer=0x215a5a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215a5a8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.507] WriteFile (in: hFile=0x270, lpBuffer=0x215a5a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215a5a8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.508] WriteFile (in: hFile=0x270, lpBuffer=0x215a5a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215a5a8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.508] WriteFile (in: hFile=0x270, lpBuffer=0x215a5a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215a5a8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.508] WriteFile (in: hFile=0x270, lpBuffer=0x215a5a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215a5a8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.508] WriteFile (in: hFile=0x270, lpBuffer=0x215a5a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215a5a8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.509] WriteFile (in: hFile=0x270, lpBuffer=0x215a5a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215a5a8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.509] WriteFile (in: hFile=0x270, lpBuffer=0x215a5a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215a5a8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.509] WriteFile (in: hFile=0x270, lpBuffer=0x215a5a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215a5a8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.509] WriteFile (in: hFile=0x270, lpBuffer=0x215a5a8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215a5a8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.509] WriteFile (in: hFile=0x270, lpBuffer=0x215a5a8*, nNumberOfBytesToWrite=0x498, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x215a5a8*, lpNumberOfBytesWritten=0x14de38*=0x498, lpOverlapped=0x0) returned 1 [0064.509] CloseHandle (hObject=0x270) returned 1 [0064.511] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.512] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.512] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0064.512] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0064.512] DrawTextExW (in: hdc=0x8010893, lpchText="175 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x215b7a8 | out: lpchText="175 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0064.512] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.512] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.512] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.512] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.512] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.512] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.512] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fySR.pptx", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fySR.pptx", lpFilePart=0x0) returned 0x2f [0064.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0064.512] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fySR.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fysr.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0064.513] GetFileType (hFile=0x270) returned 0x1 [0064.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0064.513] GetFileType (hFile=0x270) returned 0x1 [0064.513] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x16696 [0064.513] ReadFile (in: hFile=0x270, lpBuffer=0x121e8690, nNumberOfBytesToRead=0x16696, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x121e8690*, lpNumberOfBytesRead=0x14df78*=0x16696, lpOverlapped=0x0) returned 1 [0064.515] CloseHandle (hObject=0x270) returned 1 [0064.518] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fySR.pptx", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fySR.pptx", lpFilePart=0x0) returned 0x2f [0064.518] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fySR.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fysr.pptx")) returned 1 [0064.521] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fySR.pptx.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fySR.pptx.sad", lpFilePart=0x0) returned 0x33 [0064.521] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0064.521] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\fySR.pptx.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fysr.pptx.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0064.521] GetFileType (hFile=0x270) returned 0x1 [0064.522] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0064.522] GetFileType (hFile=0x270) returned 0x1 [0064.522] WriteFile (in: hFile=0x270, lpBuffer=0x215d330*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215d330*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.523] WriteFile (in: hFile=0x270, lpBuffer=0x215d330*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215d330*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.523] WriteFile (in: hFile=0x270, lpBuffer=0x215d330*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215d330*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.523] WriteFile (in: hFile=0x270, lpBuffer=0x215d330*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215d330*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.523] WriteFile (in: hFile=0x270, lpBuffer=0x215d330*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215d330*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.523] WriteFile (in: hFile=0x270, lpBuffer=0x215d330*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215d330*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.524] WriteFile (in: hFile=0x270, lpBuffer=0x215d330*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215d330*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.524] WriteFile (in: hFile=0x270, lpBuffer=0x215d330*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215d330*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.524] WriteFile (in: hFile=0x270, lpBuffer=0x215d330*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215d330*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.524] WriteFile (in: hFile=0x270, lpBuffer=0x215d330*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215d330*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.524] WriteFile (in: hFile=0x270, lpBuffer=0x215d330*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215d330*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.525] WriteFile (in: hFile=0x270, lpBuffer=0x215d330*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215d330*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.525] WriteFile (in: hFile=0x270, lpBuffer=0x215d330*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215d330*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.525] WriteFile (in: hFile=0x270, lpBuffer=0x215d330*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215d330*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.525] WriteFile (in: hFile=0x270, lpBuffer=0x215d330*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215d330*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.525] WriteFile (in: hFile=0x270, lpBuffer=0x215d330*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215d330*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.526] WriteFile (in: hFile=0x270, lpBuffer=0x215d330*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215d330*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.526] WriteFile (in: hFile=0x270, lpBuffer=0x215d330*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215d330*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.526] WriteFile (in: hFile=0x270, lpBuffer=0x215d330*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215d330*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.526] WriteFile (in: hFile=0x270, lpBuffer=0x215d330*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215d330*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.526] WriteFile (in: hFile=0x270, lpBuffer=0x215d330*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215d330*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.526] WriteFile (in: hFile=0x270, lpBuffer=0x215d330*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215d330*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.527] WriteFile (in: hFile=0x270, lpBuffer=0x215d330*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215d330*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.527] WriteFile (in: hFile=0x270, lpBuffer=0x215d330*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215d330*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.527] WriteFile (in: hFile=0x270, lpBuffer=0x215d330*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215d330*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.527] WriteFile (in: hFile=0x270, lpBuffer=0x215d330*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215d330*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.527] WriteFile (in: hFile=0x270, lpBuffer=0x215d330*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215d330*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.528] WriteFile (in: hFile=0x270, lpBuffer=0x215d330*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215d330*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.528] WriteFile (in: hFile=0x270, lpBuffer=0x215d330*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x215d330*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.528] WriteFile (in: hFile=0x270, lpBuffer=0x215d330*, nNumberOfBytesToWrite=0xe20, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x215d330*, lpNumberOfBytesWritten=0x14de38*=0xe20, lpOverlapped=0x0) returned 1 [0064.528] CloseHandle (hObject=0x270) returned 1 [0064.530] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.530] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.531] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0064.531] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0064.531] DrawTextExW (in: hdc=0x8010893, lpchText="176 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x215e530 | out: lpchText="176 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0064.531] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.531] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.531] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.531] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.531] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.531] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.531] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GVBB- -Brr1bqPyvjM.bmp", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GVBB- -Brr1bqPyvjM.bmp", lpFilePart=0x0) returned 0x3c [0064.531] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0064.531] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GVBB- -Brr1bqPyvjM.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gvbb- -brr1bqpyvjm.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0064.531] GetFileType (hFile=0x270) returned 0x1 [0064.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0064.531] GetFileType (hFile=0x270) returned 0x1 [0064.531] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0xdaef [0064.532] ReadFile (in: hFile=0x270, lpBuffer=0x215e988, nNumberOfBytesToRead=0xdaef, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x215e988*, lpNumberOfBytesRead=0x14df78*=0xdaef, lpOverlapped=0x0) returned 1 [0064.532] CloseHandle (hObject=0x270) returned 1 [0064.535] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GVBB- -Brr1bqPyvjM.bmp", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GVBB- -Brr1bqPyvjM.bmp", lpFilePart=0x0) returned 0x3c [0064.535] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GVBB- -Brr1bqPyvjM.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gvbb- -brr1bqpyvjm.bmp")) returned 1 [0064.537] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GVBB- -Brr1bqPyvjM.bmp.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GVBB- -Brr1bqPyvjM.bmp.sad", lpFilePart=0x0) returned 0x40 [0064.537] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0064.538] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\GVBB- -Brr1bqPyvjM.bmp.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\gvbb- -brr1bqpyvjm.bmp.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0064.538] GetFileType (hFile=0x270) returned 0x1 [0064.538] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0064.538] GetFileType (hFile=0x270) returned 0x1 [0064.538] WriteFile (in: hFile=0x270, lpBuffer=0x216dc88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x216dc88*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.539] WriteFile (in: hFile=0x270, lpBuffer=0x216dc88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x216dc88*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.540] WriteFile (in: hFile=0x270, lpBuffer=0x216dc88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x216dc88*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.540] WriteFile (in: hFile=0x270, lpBuffer=0x216dc88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x216dc88*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.540] WriteFile (in: hFile=0x270, lpBuffer=0x216dc88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x216dc88*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.540] WriteFile (in: hFile=0x270, lpBuffer=0x216dc88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x216dc88*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.540] WriteFile (in: hFile=0x270, lpBuffer=0x216dc88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x216dc88*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.541] WriteFile (in: hFile=0x270, lpBuffer=0x216dc88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x216dc88*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.541] WriteFile (in: hFile=0x270, lpBuffer=0x216dc88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x216dc88*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.541] WriteFile (in: hFile=0x270, lpBuffer=0x216dc88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x216dc88*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.541] WriteFile (in: hFile=0x270, lpBuffer=0x216dc88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x216dc88*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.541] WriteFile (in: hFile=0x270, lpBuffer=0x216dc88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x216dc88*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.542] WriteFile (in: hFile=0x270, lpBuffer=0x216dc88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x216dc88*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.542] WriteFile (in: hFile=0x270, lpBuffer=0x216dc88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x216dc88*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.542] WriteFile (in: hFile=0x270, lpBuffer=0x216dc88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x216dc88*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.542] WriteFile (in: hFile=0x270, lpBuffer=0x216dc88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x216dc88*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.542] WriteFile (in: hFile=0x270, lpBuffer=0x216dc88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x216dc88*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.542] WriteFile (in: hFile=0x270, lpBuffer=0x216dc88*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14de58, lpOverlapped=0x0 | out: lpBuffer=0x216dc88*, lpNumberOfBytesWritten=0x14de58*=0x1000, lpOverlapped=0x0) returned 1 [0064.543] WriteFile (in: hFile=0x270, lpBuffer=0x216dc88*, nNumberOfBytesToWrite=0x3ec, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x216dc88*, lpNumberOfBytesWritten=0x14de38*=0x3ec, lpOverlapped=0x0) returned 1 [0064.543] CloseHandle (hObject=0x270) returned 1 [0064.544] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.544] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.545] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0064.545] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0064.545] DrawTextExW (in: hdc=0x8010893, lpchText="177 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x216ee88 | out: lpchText="177 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0064.545] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.545] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.545] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.545] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.545] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.545] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.545] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\h DMK.jpg", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\h DMK.jpg", lpFilePart=0x0) returned 0x2f [0064.545] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0064.545] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\h DMK.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\h dmk.jpg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0064.545] GetFileType (hFile=0x270) returned 0x1 [0064.546] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0064.546] GetFileType (hFile=0x270) returned 0x1 [0064.546] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x66e1 [0064.546] ReadFile (in: hFile=0x270, lpBuffer=0x216f290, nNumberOfBytesToRead=0x66e1, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x216f290*, lpNumberOfBytesRead=0x14df78*=0x66e1, lpOverlapped=0x0) returned 1 [0064.547] CloseHandle (hObject=0x270) returned 1 [0064.547] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\h DMK.jpg", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\h DMK.jpg", lpFilePart=0x0) returned 0x2f [0064.547] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\h DMK.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\h dmk.jpg")) returned 1 [0064.549] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\h DMK.jpg.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\h DMK.jpg.sad", lpFilePart=0x0) returned 0x33 [0064.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0064.549] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\h DMK.jpg.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\h dmk.jpg.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0064.549] GetFileType (hFile=0x270) returned 0x1 [0064.550] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0064.550] GetFileType (hFile=0x270) returned 0x1 [0064.550] WriteFile (in: hFile=0x270, lpBuffer=0x2188388*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2188388*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.551] WriteFile (in: hFile=0x270, lpBuffer=0x2188388*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2188388*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.551] WriteFile (in: hFile=0x270, lpBuffer=0x2188388*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2188388*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.551] WriteFile (in: hFile=0x270, lpBuffer=0x2188388*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2188388*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.551] WriteFile (in: hFile=0x270, lpBuffer=0x2188388*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2188388*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.551] WriteFile (in: hFile=0x270, lpBuffer=0x2188388*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2188388*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.552] WriteFile (in: hFile=0x270, lpBuffer=0x2188388*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2188388*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.552] WriteFile (in: hFile=0x270, lpBuffer=0x2188388*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2188388*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.552] WriteFile (in: hFile=0x270, lpBuffer=0x2188388*, nNumberOfBytesToWrite=0x92c, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x2188388*, lpNumberOfBytesWritten=0x14de38*=0x92c, lpOverlapped=0x0) returned 1 [0064.552] CloseHandle (hObject=0x270) returned 1 [0064.554] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.554] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.554] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0064.554] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0064.554] DrawTextExW (in: hdc=0x8010893, lpchText="178 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x2189588 | out: lpchText="178 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0064.554] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.554] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.554] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.554] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.554] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.554] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.554] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iituR.xls", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iituR.xls", lpFilePart=0x0) returned 0x2f [0064.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0064.555] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iituR.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\iitur.xls"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0064.555] GetFileType (hFile=0x270) returned 0x1 [0064.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0064.555] GetFileType (hFile=0x270) returned 0x1 [0064.555] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x10382 [0064.555] ReadFile (in: hFile=0x270, lpBuffer=0x2189990, nNumberOfBytesToRead=0x10382, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x2189990*, lpNumberOfBytesRead=0x14df78*=0x10382, lpOverlapped=0x0) returned 1 [0064.556] CloseHandle (hObject=0x270) returned 1 [0064.559] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iituR.xls", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iituR.xls", lpFilePart=0x0) returned 0x2f [0064.559] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iituR.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\iitur.xls")) returned 1 [0064.561] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iituR.xls.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iituR.xls.sad", lpFilePart=0x0) returned 0x33 [0064.561] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0064.561] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iituR.xls.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\iitur.xls.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0064.562] GetFileType (hFile=0x270) returned 0x1 [0064.562] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0064.562] GetFileType (hFile=0x270) returned 0x1 [0064.562] WriteFile (in: hFile=0x270, lpBuffer=0x219b4b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219b4b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.563] WriteFile (in: hFile=0x270, lpBuffer=0x219b4b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219b4b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.563] WriteFile (in: hFile=0x270, lpBuffer=0x219b4b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219b4b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.563] WriteFile (in: hFile=0x270, lpBuffer=0x219b4b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219b4b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.564] WriteFile (in: hFile=0x270, lpBuffer=0x219b4b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219b4b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.564] WriteFile (in: hFile=0x270, lpBuffer=0x219b4b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219b4b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.564] WriteFile (in: hFile=0x270, lpBuffer=0x219b4b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219b4b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.564] WriteFile (in: hFile=0x270, lpBuffer=0x219b4b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219b4b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.564] WriteFile (in: hFile=0x270, lpBuffer=0x219b4b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219b4b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.565] WriteFile (in: hFile=0x270, lpBuffer=0x219b4b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219b4b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.565] WriteFile (in: hFile=0x270, lpBuffer=0x219b4b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219b4b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.565] WriteFile (in: hFile=0x270, lpBuffer=0x219b4b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219b4b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.565] WriteFile (in: hFile=0x270, lpBuffer=0x219b4b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219b4b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.565] WriteFile (in: hFile=0x270, lpBuffer=0x219b4b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219b4b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.565] WriteFile (in: hFile=0x270, lpBuffer=0x219b4b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219b4b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.566] WriteFile (in: hFile=0x270, lpBuffer=0x219b4b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219b4b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.566] WriteFile (in: hFile=0x270, lpBuffer=0x219b4b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219b4b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.566] WriteFile (in: hFile=0x270, lpBuffer=0x219b4b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219b4b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.566] WriteFile (in: hFile=0x270, lpBuffer=0x219b4b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219b4b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.566] WriteFile (in: hFile=0x270, lpBuffer=0x219b4b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219b4b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.566] WriteFile (in: hFile=0x270, lpBuffer=0x219b4b0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219b4b0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0064.567] WriteFile (in: hFile=0x270, lpBuffer=0x219b4b0*, nNumberOfBytesToWrite=0xa04, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x219b4b0*, lpNumberOfBytesWritten=0x14de38*=0xa04, lpOverlapped=0x0) returned 1 [0064.569] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.569] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.569] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0064.569] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0064.569] DrawTextExW (in: hdc=0x8010893, lpchText="179 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x219c6b0 | out: lpchText="179 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0064.569] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.569] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.569] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.569] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.569] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.569] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.570] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Iu4j5xThTzyhquU_FU.wav", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Iu4j5xThTzyhquU_FU.wav", lpFilePart=0x0) returned 0x3c [0064.570] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0064.570] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Iu4j5xThTzyhquU_FU.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\iu4j5xthtzyhquu_fu.wav"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0064.570] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0064.570] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x1788f [0064.570] ReadFile (in: hFile=0x270, lpBuffer=0x1228a640, nNumberOfBytesToRead=0x1788f, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x1228a640*, lpNumberOfBytesRead=0x14df78*=0x1788f, lpOverlapped=0x0) returned 1 [0064.574] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Iu4j5xThTzyhquU_FU.wav", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Iu4j5xThTzyhquU_FU.wav", lpFilePart=0x0) returned 0x3c [0064.574] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Iu4j5xThTzyhquU_FU.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\iu4j5xthtzyhquu_fu.wav")) returned 1 [0064.576] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Iu4j5xThTzyhquU_FU.wav.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Iu4j5xThTzyhquU_FU.wav.sad", lpFilePart=0x0) returned 0x40 [0064.576] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0064.576] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Iu4j5xThTzyhquU_FU.wav.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\iu4j5xthtzyhquu_fu.wav.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0064.577] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0064.581] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.581] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.581] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0064.581] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0064.581] DrawTextExW (in: hdc=0x8010893, lpchText="180 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x219f500 | out: lpchText="180 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0064.581] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.581] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.581] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.581] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.582] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.582] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.582] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JBC63LlZYmpGUISf7.gif", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JBC63LlZYmpGUISf7.gif", lpFilePart=0x0) returned 0x3b [0064.582] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0064.582] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JBC63LlZYmpGUISf7.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jbc63llzympguisf7.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0064.582] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0064.582] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x10a90 [0064.582] ReadFile (in: hFile=0x270, lpBuffer=0x219f950, nNumberOfBytesToRead=0x10a90, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x219f950*, lpNumberOfBytesRead=0x14df78*=0x10a90, lpOverlapped=0x0) returned 1 [0064.585] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JBC63LlZYmpGUISf7.gif", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JBC63LlZYmpGUISf7.gif", lpFilePart=0x0) returned 0x3b [0064.585] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JBC63LlZYmpGUISf7.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jbc63llzympguisf7.gif")) returned 1 [0064.587] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JBC63LlZYmpGUISf7.gif.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JBC63LlZYmpGUISf7.gif.sad", lpFilePart=0x0) returned 0x3f [0064.587] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0064.587] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\JBC63LlZYmpGUISf7.gif.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\jbc63llzympguisf7.gif.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0064.588] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0064.591] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.591] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.591] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0064.591] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0064.591] DrawTextExW (in: hdc=0x8010893, lpchText="181 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x21b2dd8 | out: lpchText="181 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0064.591] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.591] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.591] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.591] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.591] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.591] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.592] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Kr02aEj0QbL1.m4a", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Kr02aEj0QbL1.m4a", lpFilePart=0x0) returned 0x36 [0064.592] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0064.592] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Kr02aEj0QbL1.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kr02aej0qbl1.m4a"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0064.592] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0064.592] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0xba51 [0064.592] ReadFile (in: hFile=0x270, lpBuffer=0x21b3210, nNumberOfBytesToRead=0xba51, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x21b3210*, lpNumberOfBytesRead=0x14df78*=0xba51, lpOverlapped=0x0) returned 1 [0064.594] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Kr02aEj0QbL1.m4a", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Kr02aEj0QbL1.m4a", lpFilePart=0x0) returned 0x36 [0064.594] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Kr02aEj0QbL1.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kr02aej0qbl1.m4a")) returned 1 [0064.596] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Kr02aEj0QbL1.m4a.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Kr02aEj0QbL1.m4a.sad", lpFilePart=0x0) returned 0x3a [0064.596] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0064.596] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Kr02aEj0QbL1.m4a.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\kr02aej0qbl1.m4a.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0064.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0064.599] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.599] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.600] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0064.600] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0064.600] DrawTextExW (in: hdc=0x8010893, lpchText="182 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x21c1640 | out: lpchText="182 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0064.600] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.600] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.600] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.600] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.600] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.600] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.600] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mpd14v.flv", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mpd14v.flv", lpFilePart=0x0) returned 0x30 [0064.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0064.600] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mpd14v.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mpd14v.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0064.600] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0064.600] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x13633 [0064.601] ReadFile (in: hFile=0x270, lpBuffer=0x21c1a50, nNumberOfBytesToRead=0x13633, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x21c1a50*, lpNumberOfBytesRead=0x14df78*=0x13633, lpOverlapped=0x0) returned 1 [0064.603] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mpd14v.flv", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mpd14v.flv", lpFilePart=0x0) returned 0x30 [0064.603] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mpd14v.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mpd14v.flv")) returned 1 [0064.606] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mpd14v.flv.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mpd14v.flv.sad", lpFilePart=0x0) returned 0x34 [0064.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0064.606] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\mpd14v.flv.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\mpd14v.flv.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0064.607] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0064.610] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.610] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.610] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0064.610] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0064.610] DrawTextExW (in: hdc=0x8010893, lpchText="183 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x21d7a38 | out: lpchText="183 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0064.610] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.610] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.610] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.610] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.610] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.610] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.610] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OHcWEvwL0FBfhOSZjxm.bmp", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OHcWEvwL0FBfhOSZjxm.bmp", lpFilePart=0x0) returned 0x3d [0064.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0064.611] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OHcWEvwL0FBfhOSZjxm.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ohcwevwl0fbfhoszjxm.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0064.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0064.611] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x15f87 [0064.611] ReadFile (in: hFile=0x270, lpBuffer=0x1235ff18, nNumberOfBytesToRead=0x15f87, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x1235ff18*, lpNumberOfBytesRead=0x14df78*=0x15f87, lpOverlapped=0x0) returned 1 [0064.615] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OHcWEvwL0FBfhOSZjxm.bmp", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OHcWEvwL0FBfhOSZjxm.bmp", lpFilePart=0x0) returned 0x3d [0064.615] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OHcWEvwL0FBfhOSZjxm.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ohcwevwl0fbfhoszjxm.bmp")) returned 1 [0064.617] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OHcWEvwL0FBfhOSZjxm.bmp.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OHcWEvwL0FBfhOSZjxm.bmp.sad", lpFilePart=0x0) returned 0x41 [0064.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0064.617] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\OHcWEvwL0FBfhOSZjxm.bmp.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ohcwevwl0fbfhoszjxm.bmp.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0064.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0064.622] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.622] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.622] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0064.622] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0064.622] DrawTextExW (in: hdc=0x8010893, lpchText="184 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x21da888 | out: lpchText="184 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0064.622] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.622] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.622] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.622] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.623] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.623] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.623] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P v.png", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P v.png", lpFilePart=0x0) returned 0x2d [0064.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0064.623] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P v.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\p v.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0064.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0064.623] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0xddd1 [0064.623] ReadFile (in: hFile=0x270, lpBuffer=0x21dac80, nNumberOfBytesToRead=0xddd1, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x21dac80*, lpNumberOfBytesRead=0x14df78*=0xddd1, lpOverlapped=0x0) returned 1 [0064.625] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P v.png", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P v.png", lpFilePart=0x0) returned 0x2d [0064.625] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P v.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\p v.png")) returned 1 [0064.628] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P v.png.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P v.png.sad", lpFilePart=0x0) returned 0x31 [0064.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0064.628] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\P v.png.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\p v.png.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0064.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0064.631] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.631] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.631] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0064.632] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0064.632] DrawTextExW (in: hdc=0x8010893, lpchText="185 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x21eb3e8 | out: lpchText="185 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0064.632] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.632] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.632] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.632] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.632] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.632] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.632] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Pc17D9P7kNyP8gLZK.mp4", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Pc17D9P7kNyP8gLZK.mp4", lpFilePart=0x0) returned 0x3b [0064.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0064.632] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Pc17D9P7kNyP8gLZK.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pc17d9p7knyp8glzk.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0064.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0064.632] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0xa4cc [0064.632] ReadFile (in: hFile=0x270, lpBuffer=0x21eb838, nNumberOfBytesToRead=0xa4cc, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x21eb838*, lpNumberOfBytesRead=0x14df78*=0xa4cc, lpOverlapped=0x0) returned 1 [0064.634] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Pc17D9P7kNyP8gLZK.mp4", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Pc17D9P7kNyP8gLZK.mp4", lpFilePart=0x0) returned 0x3b [0064.634] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Pc17D9P7kNyP8gLZK.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pc17d9p7knyp8glzk.mp4")) returned 1 [0064.636] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Pc17D9P7kNyP8gLZK.mp4.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Pc17D9P7kNyP8gLZK.mp4.sad", lpFilePart=0x0) returned 0x3f [0064.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0064.636] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Pc17D9P7kNyP8gLZK.mp4.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pc17d9p7knyp8glzk.mp4.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0064.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0064.645] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.645] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.645] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0064.645] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0064.645] DrawTextExW (in: hdc=0x8010893, lpchText="186 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x21f8700 | out: lpchText="186 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0064.645] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.645] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.645] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.646] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.646] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.646] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.646] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Q9Pj.odp", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Q9Pj.odp", lpFilePart=0x0) returned 0x2e [0064.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0064.646] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Q9Pj.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\q9pj.odp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0064.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0064.646] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x8bf3 [0064.646] ReadFile (in: hFile=0x270, lpBuffer=0x21f8b08, nNumberOfBytesToRead=0x8bf3, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x21f8b08*, lpNumberOfBytesRead=0x14df78*=0x8bf3, lpOverlapped=0x0) returned 1 [0064.648] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Q9Pj.odp", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Q9Pj.odp", lpFilePart=0x0) returned 0x2e [0064.648] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Q9Pj.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\q9pj.odp")) returned 1 [0064.649] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Q9Pj.odp.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Q9Pj.odp.sad", lpFilePart=0x0) returned 0x32 [0064.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0064.650] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Q9Pj.odp.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\q9pj.odp.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0064.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0064.652] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.652] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.652] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0064.652] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0064.652] DrawTextExW (in: hdc=0x8010893, lpchText="187 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x2204098 | out: lpchText="187 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0064.653] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.653] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.653] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.653] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.653] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.653] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.653] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Rz07V2x.swf", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Rz07V2x.swf", lpFilePart=0x0) returned 0x31 [0064.653] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0064.653] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Rz07V2x.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rz07v2x.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0064.653] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0064.653] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x8b38 [0064.653] ReadFile (in: hFile=0x270, lpBuffer=0x22044a8, nNumberOfBytesToRead=0x8b38, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x22044a8*, lpNumberOfBytesRead=0x14df78*=0x8b38, lpOverlapped=0x0) returned 1 [0064.655] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Rz07V2x.swf", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Rz07V2x.swf", lpFilePart=0x0) returned 0x31 [0064.655] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Rz07V2x.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rz07v2x.swf")) returned 1 [0064.657] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Rz07V2x.swf.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Rz07V2x.swf.sad", lpFilePart=0x0) returned 0x35 [0064.657] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0064.657] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Rz07V2x.swf.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\rz07v2x.swf.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0064.657] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0064.659] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.659] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.659] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0064.659] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0064.659] DrawTextExW (in: hdc=0x8010893, lpchText="188 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x220f990 | out: lpchText="188 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0064.660] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.660] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.660] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0064.660] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0064.660] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0064.660] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0064.660] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SadComputer.exe", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SadComputer.exe", lpFilePart=0x0) returned 0x35 [0064.660] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0064.660] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SadComputer.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sadcomputer.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0064.660] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0064.660] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x3ac00 [0064.661] ReadFile (in: hFile=0x270, lpBuffer=0x1241f8f8, nNumberOfBytesToRead=0x3ac00, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x1241f8f8*, lpNumberOfBytesRead=0x14df78*=0x3ac00, lpOverlapped=0x0) returned 1 [0064.666] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SadComputer.exe", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SadComputer.exe", lpFilePart=0x0) returned 0x35 [0064.666] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SadComputer.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sadcomputer.exe")) returned 0 [0067.722] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SadComputer.exe.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SadComputer.exe.sad", lpFilePart=0x0) returned 0x39 [0067.722] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0067.722] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SadComputer.exe.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sadcomputer.exe.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0067.723] GetFileType (hFile=0x270) returned 0x1 [0067.723] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0067.723] GetFileType (hFile=0x270) returned 0x1 [0067.723] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.724] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.725] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.725] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.725] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.725] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.726] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.726] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.726] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.726] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.727] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.727] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.727] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.727] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.728] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.728] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.728] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.729] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.729] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.729] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.729] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.730] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.730] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.730] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.730] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.731] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.731] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.731] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.731] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.732] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.732] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.732] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.732] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.733] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.733] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.733] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.733] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.734] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.734] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.734] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.735] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.735] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.735] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.735] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.735] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.736] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.736] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.736] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.736] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.737] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.737] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.737] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.737] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.738] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.738] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.738] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.738] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.739] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.739] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.739] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.739] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.740] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.740] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.740] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.740] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.741] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.741] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.742] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.742] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.742] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.742] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.742] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.742] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.742] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.743] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.743] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.743] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.743] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.743] WriteFile (in: hFile=0x270, lpBuffer=0x21344d0*, nNumberOfBytesToWrite=0x558, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x21344d0*, lpNumberOfBytesWritten=0x14de38*=0x558, lpOverlapped=0x0) returned 1 [0067.743] CloseHandle (hObject=0x270) returned 1 [0067.746] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0067.746] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 1 [0067.746] PeekMessageW (in: lpMsg=0x2116508, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x2116508) returned 1 [0067.746] IsWindowUnicode (hWnd=0x301ee) returned 1 [0067.746] GetMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14df90) returned 1 [0067.746] TranslateMessage (lpMsg=0x14df90) returned 0 [0067.746] DispatchMessageW (lpMsg=0x14df90) returned 0x0 [0067.747] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0067.747] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0067.747] CoTaskMemFree (pv=0xa692f0) [0067.747] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0067.748] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0067.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14d7c0) returned 1 [0067.748] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14d8a0 | out: lpFileInformation=0x14d8a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0067.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d780) returned 1 [0067.748] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14d200, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0067.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14d6e0) returned 1 [0067.748] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0067.748] GetFileType (hFile=0x270) returned 0x1 [0067.748] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d650) returned 1 [0067.748] GetFileType (hFile=0x270) returned 0x1 [0067.748] ReadFile (in: hFile=0x270, lpBuffer=0x21372e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14d7b8, lpOverlapped=0x0 | out: lpBuffer=0x21372e0*, lpNumberOfBytesRead=0x14d7b8*=0x1, lpOverlapped=0x0) returned 1 [0067.748] ReadFile (in: hFile=0x270, lpBuffer=0x21372e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14d7b8, lpOverlapped=0x0 | out: lpBuffer=0x21372e0*, lpNumberOfBytesRead=0x14d7b8*=0x0, lpOverlapped=0x0) returned 1 [0067.748] CloseHandle (hObject=0x270) returned 1 [0067.749] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0067.749] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0067.749] CoTaskMemFree (pv=0xa692f0) [0067.749] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14d230, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0067.749] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14d380, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0067.749] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14d7c0) returned 1 [0067.749] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14d8a0 | out: lpFileInformation=0x14d8a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0067.750] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d780) returned 1 [0067.750] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14d1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0067.750] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14d6a0) returned 1 [0067.750] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0067.751] GetFileType (hFile=0x270) returned 0x1 [0067.751] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14d610) returned 1 [0067.751] GetFileType (hFile=0x270) returned 0x1 [0067.751] WriteFile (in: hFile=0x270, lpBuffer=0x213a630*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x14d6e8, lpOverlapped=0x0 | out: lpBuffer=0x213a630*, lpNumberOfBytesWritten=0x14d6e8*=0x1, lpOverlapped=0x0) returned 1 [0067.752] CloseHandle (hObject=0x270) returned 1 [0067.753] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0067.753] AdjustWindowRectEx (in: lpRect=0x14d658, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d658) returned 1 [0067.753] SelectObject (hdc=0x8010893, h=0x200a0899) returned 0xb0a087e [0067.753] DrawTextExW (in: hdc=0x8010893, lpchText="4:57", cchText=4, lprc=0x14d5c8, format=0x2400, lpdtp=0x213b6a8 | out: lpchText="4:57", lprc=0x14d5c8) returned 20 [0067.753] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0067.753] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0067.753] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0067.753] SelectObject (hdc=0x8010893, h=0xb0a087e) returned 0x200a0899 [0067.753] DrawTextExW (in: hdc=0x8010893, lpchText="189 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x213b830 | out: lpchText="189 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0067.754] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0067.754] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0067.754] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0067.754] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0067.754] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0067.754] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0067.754] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0067.754] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0067.754] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0067.754] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0067.754] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SEy3N.mp3", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SEy3N.mp3", lpFilePart=0x0) returned 0x2f [0067.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0067.754] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SEy3N.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sey3n.mp3"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0067.754] GetFileType (hFile=0x270) returned 0x1 [0067.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0067.754] GetFileType (hFile=0x270) returned 0x1 [0067.754] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x14179 [0067.754] ReadFile (in: hFile=0x270, lpBuffer=0x213be40, nNumberOfBytesToRead=0x14179, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x213be40*, lpNumberOfBytesRead=0x14df78*=0x14179, lpOverlapped=0x0) returned 1 [0067.755] CloseHandle (hObject=0x270) returned 1 [0067.756] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SEy3N.mp3", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SEy3N.mp3", lpFilePart=0x0) returned 0x2f [0067.756] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SEy3N.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sey3n.mp3")) returned 1 [0067.758] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SEy3N.mp3.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SEy3N.mp3.sad", lpFilePart=0x0) returned 0x33 [0067.758] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0067.758] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SEy3N.mp3.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sey3n.mp3.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0067.759] GetFileType (hFile=0x270) returned 0x1 [0067.759] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0067.759] GetFileType (hFile=0x270) returned 0x1 [0067.759] WriteFile (in: hFile=0x270, lpBuffer=0x2151758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2151758*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.760] WriteFile (in: hFile=0x270, lpBuffer=0x2151758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2151758*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.760] WriteFile (in: hFile=0x270, lpBuffer=0x2151758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2151758*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.761] WriteFile (in: hFile=0x270, lpBuffer=0x2151758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2151758*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.761] WriteFile (in: hFile=0x270, lpBuffer=0x2151758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2151758*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.761] WriteFile (in: hFile=0x270, lpBuffer=0x2151758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2151758*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.762] WriteFile (in: hFile=0x270, lpBuffer=0x2151758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2151758*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.762] WriteFile (in: hFile=0x270, lpBuffer=0x2151758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2151758*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.762] WriteFile (in: hFile=0x270, lpBuffer=0x2151758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2151758*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.763] WriteFile (in: hFile=0x270, lpBuffer=0x2151758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2151758*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.763] WriteFile (in: hFile=0x270, lpBuffer=0x2151758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2151758*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.763] WriteFile (in: hFile=0x270, lpBuffer=0x2151758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2151758*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.764] WriteFile (in: hFile=0x270, lpBuffer=0x2151758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2151758*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.764] WriteFile (in: hFile=0x270, lpBuffer=0x2151758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2151758*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.764] WriteFile (in: hFile=0x270, lpBuffer=0x2151758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2151758*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.765] WriteFile (in: hFile=0x270, lpBuffer=0x2151758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2151758*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.765] WriteFile (in: hFile=0x270, lpBuffer=0x2151758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2151758*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.765] WriteFile (in: hFile=0x270, lpBuffer=0x2151758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2151758*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.766] WriteFile (in: hFile=0x270, lpBuffer=0x2151758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2151758*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.766] WriteFile (in: hFile=0x270, lpBuffer=0x2151758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2151758*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.766] WriteFile (in: hFile=0x270, lpBuffer=0x2151758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2151758*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.767] WriteFile (in: hFile=0x270, lpBuffer=0x2151758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2151758*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.767] WriteFile (in: hFile=0x270, lpBuffer=0x2151758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2151758*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.767] WriteFile (in: hFile=0x270, lpBuffer=0x2151758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2151758*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.767] WriteFile (in: hFile=0x270, lpBuffer=0x2151758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2151758*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.768] WriteFile (in: hFile=0x270, lpBuffer=0x2151758*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2151758*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.768] WriteFile (in: hFile=0x270, lpBuffer=0x2151758*, nNumberOfBytesToWrite=0xca4, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x2151758*, lpNumberOfBytesWritten=0x14de38*=0xca4, lpOverlapped=0x0) returned 1 [0067.768] CloseHandle (hObject=0x270) returned 1 [0067.770] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0067.771] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0067.771] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0067.771] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0067.771] DrawTextExW (in: hdc=0x8010893, lpchText="190 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x2152980 | out: lpchText="190 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0067.771] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0067.771] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0067.771] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0067.771] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0067.771] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0067.771] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0067.771] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sz8H cE.xlsx", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sz8H cE.xlsx", lpFilePart=0x0) returned 0x32 [0067.771] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0067.771] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sz8H cE.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sz8h ce.xlsx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0067.772] GetFileType (hFile=0x270) returned 0x1 [0067.772] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0067.772] GetFileType (hFile=0x270) returned 0x1 [0067.772] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x3a56 [0067.772] ReadFile (in: hFile=0x270, lpBuffer=0x2152da0, nNumberOfBytesToRead=0x3a56, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x2152da0*, lpNumberOfBytesRead=0x14df78*=0x3a56, lpOverlapped=0x0) returned 1 [0067.773] CloseHandle (hObject=0x270) returned 1 [0067.773] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sz8H cE.xlsx", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sz8H cE.xlsx", lpFilePart=0x0) returned 0x32 [0067.773] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sz8H cE.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sz8h ce.xlsx")) returned 1 [0067.775] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sz8H cE.xlsx.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sz8H cE.xlsx.sad", lpFilePart=0x0) returned 0x36 [0067.775] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0067.775] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sz8H cE.xlsx.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sz8h ce.xlsx.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0067.775] GetFileType (hFile=0x270) returned 0x1 [0067.775] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0067.776] GetFileType (hFile=0x270) returned 0x1 [0067.776] WriteFile (in: hFile=0x270, lpBuffer=0x2161b60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2161b60*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.777] WriteFile (in: hFile=0x270, lpBuffer=0x2161b60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2161b60*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.777] WriteFile (in: hFile=0x270, lpBuffer=0x2161b60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2161b60*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.778] WriteFile (in: hFile=0x270, lpBuffer=0x2161b60*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2161b60*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.778] WriteFile (in: hFile=0x270, lpBuffer=0x2161b60*, nNumberOfBytesToWrite=0xdc8, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x2161b60*, lpNumberOfBytesWritten=0x14de38*=0xdc8, lpOverlapped=0x0) returned 1 [0067.778] CloseHandle (hObject=0x270) returned 1 [0067.781] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0067.781] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0067.781] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0067.781] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0067.781] DrawTextExW (in: hdc=0x8010893, lpchText="191 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x2162d60 | out: lpchText="191 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0067.781] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0067.781] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0067.781] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0067.781] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0067.781] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0067.782] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0067.782] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TVBW.ods", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TVBW.ods", lpFilePart=0x0) returned 0x2e [0067.782] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0067.782] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TVBW.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tvbw.ods"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0067.782] GetFileType (hFile=0x270) returned 0x1 [0067.782] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0067.782] GetFileType (hFile=0x270) returned 0x1 [0067.782] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x137bb [0067.782] ReadFile (in: hFile=0x270, lpBuffer=0x2163168, nNumberOfBytesToRead=0x137bb, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x2163168*, lpNumberOfBytesRead=0x14df78*=0x137bb, lpOverlapped=0x0) returned 1 [0067.783] CloseHandle (hObject=0x270) returned 1 [0067.783] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TVBW.ods", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TVBW.ods", lpFilePart=0x0) returned 0x2e [0067.783] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TVBW.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tvbw.ods")) returned 1 [0067.785] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TVBW.ods.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TVBW.ods.sad", lpFilePart=0x0) returned 0x32 [0067.785] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0067.785] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\TVBW.ods.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tvbw.ods.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0067.786] GetFileType (hFile=0x270) returned 0x1 [0067.786] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0067.786] GetFileType (hFile=0x270) returned 0x1 [0067.786] WriteFile (in: hFile=0x270, lpBuffer=0x21780c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21780c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.787] WriteFile (in: hFile=0x270, lpBuffer=0x21780c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21780c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.788] WriteFile (in: hFile=0x270, lpBuffer=0x21780c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21780c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.788] WriteFile (in: hFile=0x270, lpBuffer=0x21780c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21780c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.788] WriteFile (in: hFile=0x270, lpBuffer=0x21780c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21780c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.789] WriteFile (in: hFile=0x270, lpBuffer=0x21780c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21780c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.789] WriteFile (in: hFile=0x270, lpBuffer=0x21780c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21780c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.789] WriteFile (in: hFile=0x270, lpBuffer=0x21780c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21780c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.790] WriteFile (in: hFile=0x270, lpBuffer=0x21780c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21780c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.790] WriteFile (in: hFile=0x270, lpBuffer=0x21780c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21780c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.790] WriteFile (in: hFile=0x270, lpBuffer=0x21780c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21780c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.791] WriteFile (in: hFile=0x270, lpBuffer=0x21780c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21780c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.791] WriteFile (in: hFile=0x270, lpBuffer=0x21780c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21780c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.791] WriteFile (in: hFile=0x270, lpBuffer=0x21780c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21780c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.792] WriteFile (in: hFile=0x270, lpBuffer=0x21780c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21780c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.792] WriteFile (in: hFile=0x270, lpBuffer=0x21780c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21780c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.792] WriteFile (in: hFile=0x270, lpBuffer=0x21780c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21780c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.793] WriteFile (in: hFile=0x270, lpBuffer=0x21780c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21780c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.793] WriteFile (in: hFile=0x270, lpBuffer=0x21780c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21780c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.793] WriteFile (in: hFile=0x270, lpBuffer=0x21780c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21780c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.794] WriteFile (in: hFile=0x270, lpBuffer=0x21780c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21780c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.794] WriteFile (in: hFile=0x270, lpBuffer=0x21780c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21780c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.794] WriteFile (in: hFile=0x270, lpBuffer=0x21780c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21780c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.795] WriteFile (in: hFile=0x270, lpBuffer=0x21780c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21780c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.795] WriteFile (in: hFile=0x270, lpBuffer=0x21780c0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x21780c0*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.795] WriteFile (in: hFile=0x270, lpBuffer=0x21780c0*, nNumberOfBytesToWrite=0xfa4, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x21780c0*, lpNumberOfBytesWritten=0x14de38*=0xfa4, lpOverlapped=0x0) returned 1 [0067.796] CloseHandle (hObject=0x270) returned 1 [0067.798] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0067.798] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0067.798] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0067.798] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0067.798] DrawTextExW (in: hdc=0x8010893, lpchText="192 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x21792c0 | out: lpchText="192 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0067.798] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0067.798] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0067.799] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0067.799] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0067.799] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0067.799] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0067.799] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WlaaRZX.flv", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WlaaRZX.flv", lpFilePart=0x0) returned 0x31 [0067.799] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0067.799] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WlaaRZX.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wlaarzx.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0067.799] GetFileType (hFile=0x270) returned 0x1 [0067.799] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0067.799] GetFileType (hFile=0x270) returned 0x1 [0067.799] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x10c4 [0067.799] ReadFile (in: hFile=0x270, lpBuffer=0x21796d0, nNumberOfBytesToRead=0x10c4, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x21796d0*, lpNumberOfBytesRead=0x14df78*=0x10c4, lpOverlapped=0x0) returned 1 [0067.800] CloseHandle (hObject=0x270) returned 1 [0067.800] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WlaaRZX.flv", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WlaaRZX.flv", lpFilePart=0x0) returned 0x31 [0067.800] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WlaaRZX.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wlaarzx.flv")) returned 1 [0067.802] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WlaaRZX.flv.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WlaaRZX.flv.sad", lpFilePart=0x0) returned 0x35 [0067.802] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0067.802] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WlaaRZX.flv.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wlaarzx.flv.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0067.803] GetFileType (hFile=0x270) returned 0x1 [0067.803] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0067.803] GetFileType (hFile=0x270) returned 0x1 [0067.803] WriteFile (in: hFile=0x270, lpBuffer=0x217ec20*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x217ec20*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.804] WriteFile (in: hFile=0x270, lpBuffer=0x217ec20*, nNumberOfBytesToWrite=0x65c, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x217ec20*, lpNumberOfBytesWritten=0x14de38*=0x65c, lpOverlapped=0x0) returned 1 [0067.804] CloseHandle (hObject=0x270) returned 1 [0067.805] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0067.805] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0067.806] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0067.806] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0067.806] DrawTextExW (in: hdc=0x8010893, lpchText="193 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x217fe20 | out: lpchText="193 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0067.806] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0067.806] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0067.806] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0067.806] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0067.806] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0067.806] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0067.806] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WXdA6sVIkAuzud.gif", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WXdA6sVIkAuzud.gif", lpFilePart=0x0) returned 0x38 [0067.806] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0067.806] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WXdA6sVIkAuzud.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wxda6svikauzud.gif"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0067.806] GetFileType (hFile=0x270) returned 0x1 [0067.806] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0067.806] GetFileType (hFile=0x270) returned 0x1 [0067.806] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x170d2 [0067.807] ReadFile (in: hFile=0x270, lpBuffer=0x12247d68, nNumberOfBytesToRead=0x170d2, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x12247d68*, lpNumberOfBytesRead=0x14df78*=0x170d2, lpOverlapped=0x0) returned 1 [0067.807] CloseHandle (hObject=0x270) returned 1 [0067.807] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WXdA6sVIkAuzud.gif", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WXdA6sVIkAuzud.gif", lpFilePart=0x0) returned 0x38 [0067.807] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WXdA6sVIkAuzud.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wxda6svikauzud.gif")) returned 1 [0067.809] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WXdA6sVIkAuzud.gif.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WXdA6sVIkAuzud.gif.sad", lpFilePart=0x0) returned 0x3c [0067.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0067.810] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\WXdA6sVIkAuzud.gif.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wxda6svikauzud.gif.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0067.810] GetFileType (hFile=0x270) returned 0x1 [0067.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0067.810] GetFileType (hFile=0x270) returned 0x1 [0067.811] WriteFile (in: hFile=0x270, lpBuffer=0x2181a38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181a38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.812] WriteFile (in: hFile=0x270, lpBuffer=0x2181a38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181a38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.812] WriteFile (in: hFile=0x270, lpBuffer=0x2181a38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181a38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.812] WriteFile (in: hFile=0x270, lpBuffer=0x2181a38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181a38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.812] WriteFile (in: hFile=0x270, lpBuffer=0x2181a38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181a38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.813] WriteFile (in: hFile=0x270, lpBuffer=0x2181a38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181a38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.813] WriteFile (in: hFile=0x270, lpBuffer=0x2181a38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181a38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.813] WriteFile (in: hFile=0x270, lpBuffer=0x2181a38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181a38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.813] WriteFile (in: hFile=0x270, lpBuffer=0x2181a38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181a38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.813] WriteFile (in: hFile=0x270, lpBuffer=0x2181a38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181a38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.814] WriteFile (in: hFile=0x270, lpBuffer=0x2181a38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181a38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.814] WriteFile (in: hFile=0x270, lpBuffer=0x2181a38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181a38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.814] WriteFile (in: hFile=0x270, lpBuffer=0x2181a38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181a38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.814] WriteFile (in: hFile=0x270, lpBuffer=0x2181a38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181a38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.814] WriteFile (in: hFile=0x270, lpBuffer=0x2181a38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181a38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.815] WriteFile (in: hFile=0x270, lpBuffer=0x2181a38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181a38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.815] WriteFile (in: hFile=0x270, lpBuffer=0x2181a38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181a38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.815] WriteFile (in: hFile=0x270, lpBuffer=0x2181a38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181a38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.815] WriteFile (in: hFile=0x270, lpBuffer=0x2181a38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181a38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.815] WriteFile (in: hFile=0x270, lpBuffer=0x2181a38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181a38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.815] WriteFile (in: hFile=0x270, lpBuffer=0x2181a38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181a38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.816] WriteFile (in: hFile=0x270, lpBuffer=0x2181a38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181a38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.816] WriteFile (in: hFile=0x270, lpBuffer=0x2181a38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181a38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.816] WriteFile (in: hFile=0x270, lpBuffer=0x2181a38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181a38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.816] WriteFile (in: hFile=0x270, lpBuffer=0x2181a38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181a38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.816] WriteFile (in: hFile=0x270, lpBuffer=0x2181a38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181a38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.817] WriteFile (in: hFile=0x270, lpBuffer=0x2181a38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181a38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.817] WriteFile (in: hFile=0x270, lpBuffer=0x2181a38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181a38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.817] WriteFile (in: hFile=0x270, lpBuffer=0x2181a38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181a38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.817] WriteFile (in: hFile=0x270, lpBuffer=0x2181a38*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x2181a38*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.817] WriteFile (in: hFile=0x270, lpBuffer=0x2181a38*, nNumberOfBytesToWrite=0xbc4, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x2181a38*, lpNumberOfBytesWritten=0x14de38*=0xbc4, lpOverlapped=0x0) returned 1 [0067.817] CloseHandle (hObject=0x270) returned 1 [0067.819] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0067.820] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0067.820] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0067.820] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0067.820] DrawTextExW (in: hdc=0x8010893, lpchText="194 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x2182c38 | out: lpchText="194 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0067.820] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0067.820] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0067.820] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0067.820] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0067.820] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0067.820] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0067.820] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YBa0XwpwR2_Y52Xrk4J.ods", nBufferLength=0x105, lpBuffer=0x14d9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YBa0XwpwR2_Y52Xrk4J.ods", lpFilePart=0x0) returned 0x3d [0067.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14deb0) returned 1 [0067.820] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YBa0XwpwR2_Y52Xrk4J.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yba0xwpwr2_y52xrk4j.ods"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0067.820] GetFileType (hFile=0x270) returned 0x1 [0067.820] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de20) returned 1 [0067.820] GetFileType (hFile=0x270) returned 0x1 [0067.820] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14e048 | out: lpFileSizeHigh=0x14e048*=0x0) returned 0x67ac [0067.821] ReadFile (in: hFile=0x270, lpBuffer=0x2183090, nNumberOfBytesToRead=0x67ac, lpNumberOfBytesRead=0x14df78, lpOverlapped=0x0 | out: lpBuffer=0x2183090*, lpNumberOfBytesRead=0x14df78*=0x67ac, lpOverlapped=0x0) returned 1 [0067.821] CloseHandle (hObject=0x270) returned 1 [0067.821] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YBa0XwpwR2_Y52Xrk4J.ods", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YBa0XwpwR2_Y52Xrk4J.ods", lpFilePart=0x0) returned 0x3d [0067.822] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YBa0XwpwR2_Y52Xrk4J.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yba0xwpwr2_y52xrk4j.ods")) returned 1 [0067.823] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YBa0XwpwR2_Y52Xrk4J.ods.sad", nBufferLength=0x105, lpBuffer=0x14d910, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YBa0XwpwR2_Y52Xrk4J.ods.sad", lpFilePart=0x0) returned 0x41 [0067.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14ddf0) returned 1 [0067.823] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\YBa0XwpwR2_Y52Xrk4J.ods.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\yba0xwpwr2_y52xrk4j.ods.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0067.824] GetFileType (hFile=0x270) returned 0x1 [0067.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd60) returned 1 [0067.824] GetFileType (hFile=0x270) returned 0x1 [0067.824] WriteFile (in: hFile=0x270, lpBuffer=0x219c4e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219c4e8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.825] WriteFile (in: hFile=0x270, lpBuffer=0x219c4e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219c4e8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.825] WriteFile (in: hFile=0x270, lpBuffer=0x219c4e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219c4e8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.825] WriteFile (in: hFile=0x270, lpBuffer=0x219c4e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219c4e8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.825] WriteFile (in: hFile=0x270, lpBuffer=0x219c4e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219c4e8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.825] WriteFile (in: hFile=0x270, lpBuffer=0x219c4e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219c4e8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.826] WriteFile (in: hFile=0x270, lpBuffer=0x219c4e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219c4e8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.826] WriteFile (in: hFile=0x270, lpBuffer=0x219c4e8*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ded8, lpOverlapped=0x0 | out: lpBuffer=0x219c4e8*, lpNumberOfBytesWritten=0x14ded8*=0x1000, lpOverlapped=0x0) returned 1 [0067.826] WriteFile (in: hFile=0x270, lpBuffer=0x219c4e8*, nNumberOfBytesToWrite=0xa3c, lpNumberOfBytesWritten=0x14de38, lpOverlapped=0x0 | out: lpBuffer=0x219c4e8*, lpNumberOfBytesWritten=0x14de38*=0xa3c, lpOverlapped=0x0) returned 1 [0067.826] CloseHandle (hObject=0x270) returned 1 [0067.827] GetCurrentActCtx (in: lphActCtx=0x14e040 | out: lphActCtx=0x14e040*=0xa52648) returned 1 [0067.827] PeekMessageW (in: lpMsg=0x14df90, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14df90) returned 0 [0067.827] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0067.827] AdjustWindowRectEx (in: lpRect=0x14dda8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dda8) returned 1 [0067.828] DrawTextExW (in: hdc=0x8010893, lpchText="195 Files\r\nEncrypted", cchText=20, lprc=0x14dd18, format=0x2400, lpdtp=0x219d6e8 | out: lpchText="195 Files\r\nEncrypted", lprc=0x14dd18) returned 26 [0067.828] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0067.828] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0067.828] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0067.828] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0067.828] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e190) returned 1 [0067.828] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nBufferLength=0x105, lpBuffer=0x14dc80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", lpFilePart=0x0) returned 0x25 [0067.828] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", nBufferLength=0x105, lpBuffer=0x14dc20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\", lpFilePart=0x0) returned 0x26 [0067.828] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x14de30 | out: lpFindFileData=0x14de30) returned 0xa748e0 [0067.828] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.828] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.828] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.829] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.829] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.829] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.829] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.829] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.829] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.829] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.830] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.830] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.830] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.830] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.830] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.830] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.830] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.830] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.831] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.831] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.831] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.831] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.831] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.831] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.831] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.832] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.832] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.832] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.832] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.832] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.832] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.832] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.833] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.833] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.833] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.833] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.833] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 1 [0067.833] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14de80 | out: lpFindFileData=0x14de80) returned 0 [0067.833] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0067.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e0e0) returned 1 [0067.834] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e0a0) returned 1 [0067.834] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0067.834] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0067.834] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0067.834] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0067.834] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\sadcomputer_note.txt", nBufferLength=0x105, lpBuffer=0x14d9c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\sadcomputer_note.txt", lpFilePart=0x0) returned 0x48 [0067.834] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dea0) returned 1 [0067.834] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\sadcomputer_note.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\sadcomputer_note.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0067.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14de10) returned 1 [0067.836] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0067.836] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0067.836] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e080) returned 1 [0067.836] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq", lpFilePart=0x0) returned 0x33 [0067.836] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\", nBufferLength=0x105, lpBuffer=0x14db10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\", lpFilePart=0x0) returned 0x34 [0067.837] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\*", lpFindFileData=0x14dd20 | out: lpFindFileData=0x14dd20) returned 0xa748e0 [0067.837] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0067.837] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0067.837] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0067.837] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0067.837] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0067.837] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0067.837] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0067.837] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0067.838] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0067.838] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0067.838] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0067.838] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0067.838] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0067.838] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0067.838] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0067.838] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 0 [0067.838] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0067.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dfd0) returned 1 [0067.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14df90) returned 1 [0067.839] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0067.839] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0067.839] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0067.839] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0067.839] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\5tHP_PmVQHPfJH.doc", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\5tHP_PmVQHPfJH.doc", lpFilePart=0x0) returned 0x46 [0067.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0067.839] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\5tHP_PmVQHPfJH.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\5thp_pmvqhpfjh.doc"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0067.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0067.839] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x14d59 [0067.839] ReadFile (in: hFile=0x270, lpBuffer=0x1229c640, nNumberOfBytesToRead=0x14d59, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x1229c640*, lpNumberOfBytesRead=0x14de68*=0x14d59, lpOverlapped=0x0) returned 1 [0067.840] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\5tHP_PmVQHPfJH.doc", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\5tHP_PmVQHPfJH.doc", lpFilePart=0x0) returned 0x46 [0067.840] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\5tHP_PmVQHPfJH.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\5thp_pmvqhpfjh.doc")) returned 1 [0067.842] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\5tHP_PmVQHPfJH.doc.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\5tHP_PmVQHPfJH.doc.sad", lpFilePart=0x0) returned 0x4a [0067.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0067.842] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\5tHP_PmVQHPfJH.doc.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\5thp_pmvqhpfjh.doc.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0067.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0067.846] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0067.846] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0067.846] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0067.846] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0067.846] DrawTextExW (in: hdc=0x8010893, lpchText="196 Files\r\nEncrypted", cchText=20, lprc=0x14dc08, format=0x2400, lpdtp=0x21aa3e8 | out: lpchText="196 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0067.846] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0067.847] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0067.847] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0067.847] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0067.847] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0067.847] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0067.847] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\6aWr.bmp", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\6aWr.bmp", lpFilePart=0x0) returned 0x3c [0067.847] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0067.847] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\6aWr.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\6awr.bmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0067.847] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0067.847] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x3fa5 [0067.847] ReadFile (in: hFile=0x270, lpBuffer=0x21aa810, nNumberOfBytesToRead=0x3fa5, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x21aa810*, lpNumberOfBytesRead=0x14de68*=0x3fa5, lpOverlapped=0x0) returned 1 [0067.848] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\6aWr.bmp", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\6aWr.bmp", lpFilePart=0x0) returned 0x3c [0067.848] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\6aWr.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\6awr.bmp")) returned 1 [0067.850] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\6aWr.bmp.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\6aWr.bmp.sad", lpFilePart=0x0) returned 0x40 [0067.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0067.850] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\6aWr.bmp.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\6awr.bmp.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0067.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0067.853] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0067.853] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0067.853] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0067.853] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0067.853] DrawTextExW (in: hdc=0x8010893, lpchText="197 Files\r\nEncrypted", cchText=20, lprc=0x14dc08, format=0x2400, lpdtp=0x21bbb88 | out: lpchText="197 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0067.853] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0067.853] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0067.853] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0067.853] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0067.853] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0067.853] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0067.853] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\BLp_ZOzF7hBVAla9p4.swf", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\BLp_ZOzF7hBVAla9p4.swf", lpFilePart=0x0) returned 0x4a [0067.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0067.853] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\BLp_ZOzF7hBVAla9p4.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\blp_zozf7hbvala9p4.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0067.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0067.854] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x18ce2 [0067.854] ReadFile (in: hFile=0x270, lpBuffer=0x122e8d08, nNumberOfBytesToRead=0x18ce2, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x122e8d08*, lpNumberOfBytesRead=0x14de68*=0x18ce2, lpOverlapped=0x0) returned 1 [0067.855] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\BLp_ZOzF7hBVAla9p4.swf", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\BLp_ZOzF7hBVAla9p4.swf", lpFilePart=0x0) returned 0x4a [0067.855] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\BLp_ZOzF7hBVAla9p4.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\blp_zozf7hbvala9p4.swf")) returned 1 [0067.856] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\BLp_ZOzF7hBVAla9p4.swf.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\BLp_ZOzF7hBVAla9p4.swf.sad", lpFilePart=0x0) returned 0x4e [0067.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0067.856] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\BLp_ZOzF7hBVAla9p4.swf.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\blp_zozf7hbvala9p4.swf.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0067.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0067.860] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0067.860] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0067.860] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0067.860] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0067.860] DrawTextExW (in: hdc=0x8010893, lpchText="198 Files\r\nEncrypted", cchText=20, lprc=0x14dc08, format=0x2400, lpdtp=0x21bea38 | out: lpchText="198 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0067.860] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0067.860] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0067.860] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0067.860] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0067.861] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0067.861] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0067.861] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\cgU6uP.swf", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\cgU6uP.swf", lpFilePart=0x0) returned 0x3e [0067.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0067.861] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\cgU6uP.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\cgu6up.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0067.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0067.861] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x7f0b [0067.861] ReadFile (in: hFile=0x270, lpBuffer=0x21bee60, nNumberOfBytesToRead=0x7f0b, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x21bee60*, lpNumberOfBytesRead=0x14de68*=0x7f0b, lpOverlapped=0x0) returned 1 [0067.862] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\cgU6uP.swf", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\cgU6uP.swf", lpFilePart=0x0) returned 0x3e [0067.862] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\cgU6uP.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\cgu6up.swf")) returned 1 [0067.863] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\cgU6uP.swf.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\cgU6uP.swf.sad", lpFilePart=0x0) returned 0x42 [0067.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0067.863] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\cgU6uP.swf.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\cgu6up.swf.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0067.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0067.865] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0067.865] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0067.866] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0067.866] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0067.866] DrawTextExW (in: hdc=0x8010893, lpchText="199 Files\r\nEncrypted", cchText=20, lprc=0x14dc08, format=0x2400, lpdtp=0x21c9768 | out: lpchText="199 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0067.866] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0067.866] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0067.866] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0067.866] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0067.866] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0067.866] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0067.866] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\jR2r4EM.mp4", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\jR2r4EM.mp4", lpFilePart=0x0) returned 0x3f [0067.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0067.866] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\jR2r4EM.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\jr2r4em.mp4"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0067.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0067.866] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0xa6c9 [0067.866] ReadFile (in: hFile=0x270, lpBuffer=0x21c9b90, nNumberOfBytesToRead=0xa6c9, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x21c9b90*, lpNumberOfBytesRead=0x14de68*=0xa6c9, lpOverlapped=0x0) returned 1 [0067.867] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\jR2r4EM.mp4", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\jR2r4EM.mp4", lpFilePart=0x0) returned 0x3f [0067.867] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\jR2r4EM.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\jr2r4em.mp4")) returned 1 [0067.868] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\jR2r4EM.mp4.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\jR2r4EM.mp4.sad", lpFilePart=0x0) returned 0x43 [0067.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0067.868] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\jR2r4EM.mp4.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\jr2r4em.mp4.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0067.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0067.870] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0067.870] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0067.871] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0067.871] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0067.871] DrawTextExW (in: hdc=0x8010893, lpchText="200 Files\r\nEncrypted", cchText=20, lprc=0x14dc08, format=0x2400, lpdtp=0x21d6c58 | out: lpchText="200 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0067.871] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0067.871] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0067.871] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0067.871] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0067.871] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0067.871] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0067.871] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\mT8ewA3vER5g7.pps", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\mT8ewA3vER5g7.pps", lpFilePart=0x0) returned 0x45 [0067.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0067.871] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\mT8ewA3vER5g7.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\mt8ewa3ver5g7.pps"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0067.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0067.871] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x903f [0067.871] ReadFile (in: hFile=0x270, lpBuffer=0x21d70b0, nNumberOfBytesToRead=0x903f, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x21d70b0*, lpNumberOfBytesRead=0x14de68*=0x903f, lpOverlapped=0x0) returned 1 [0067.872] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\mT8ewA3vER5g7.pps", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\mT8ewA3vER5g7.pps", lpFilePart=0x0) returned 0x45 [0067.872] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\mT8ewA3vER5g7.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\mt8ewa3ver5g7.pps")) returned 1 [0067.874] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\mT8ewA3vER5g7.pps.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\mT8ewA3vER5g7.pps.sad", lpFilePart=0x0) returned 0x49 [0067.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0067.874] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\mT8ewA3vER5g7.pps.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\mt8ewa3ver5g7.pps.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0067.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0067.876] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0067.876] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0067.876] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0067.876] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0067.876] DrawTextExW (in: hdc=0x8010893, lpchText="201 Files\r\nEncrypted", cchText=20, lprc=0x14dc08, format=0x2400, lpdtp=0x21e2b28 | out: lpchText="201 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0067.876] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0067.876] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0067.876] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0067.876] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0067.876] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0067.877] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0067.877] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\OuMNDEwQ05zUuG.pdf", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\OuMNDEwQ05zUuG.pdf", lpFilePart=0x0) returned 0x46 [0067.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0067.877] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\OuMNDEwQ05zUuG.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\oumndewq05zuug.pdf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0067.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0067.877] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0xa1d8 [0067.877] ReadFile (in: hFile=0x270, lpBuffer=0x21e2f80, nNumberOfBytesToRead=0xa1d8, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x21e2f80*, lpNumberOfBytesRead=0x14de68*=0xa1d8, lpOverlapped=0x0) returned 1 [0067.878] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\OuMNDEwQ05zUuG.pdf", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\OuMNDEwQ05zUuG.pdf", lpFilePart=0x0) returned 0x46 [0067.878] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\OuMNDEwQ05zUuG.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\oumndewq05zuug.pdf")) returned 1 [0067.880] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\OuMNDEwQ05zUuG.pdf.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\OuMNDEwQ05zUuG.pdf.sad", lpFilePart=0x0) returned 0x4a [0067.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0067.880] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\OuMNDEwQ05zUuG.pdf.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\oumndewq05zuug.pdf.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0067.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0067.882] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0067.882] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0067.882] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0067.882] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0067.882] DrawTextExW (in: hdc=0x8010893, lpchText="202 Files\r\nEncrypted", cchText=20, lprc=0x14dc08, format=0x2400, lpdtp=0x21efb90 | out: lpchText="202 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0067.882] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0067.882] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0067.882] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0067.882] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0067.882] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0067.882] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0067.882] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\OvhUKMI.flv", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\OvhUKMI.flv", lpFilePart=0x0) returned 0x3f [0067.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0067.883] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\OvhUKMI.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\ovhukmi.flv"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0067.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0067.883] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x140b3 [0067.883] ReadFile (in: hFile=0x270, lpBuffer=0x21effb8, nNumberOfBytesToRead=0x140b3, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x21effb8*, lpNumberOfBytesRead=0x14de68*=0x140b3, lpOverlapped=0x0) returned 1 [0067.884] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\OvhUKMI.flv", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\OvhUKMI.flv", lpFilePart=0x0) returned 0x3f [0067.884] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\OvhUKMI.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\ovhukmi.flv")) returned 1 [0067.885] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\OvhUKMI.flv.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\OvhUKMI.flv.sad", lpFilePart=0x0) returned 0x43 [0067.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0067.885] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\OvhUKMI.flv.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\ovhukmi.flv.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0067.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0067.889] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0067.889] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0067.889] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0067.890] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0067.890] DrawTextExW (in: hdc=0x8010893, lpchText="203 Files\r\nEncrypted", cchText=20, lprc=0x14dc08, format=0x2400, lpdtp=0x2206a68 | out: lpchText="203 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0067.890] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0067.890] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0067.890] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0067.890] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0067.890] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0067.890] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0067.890] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\QGsV1BZvq4.pptx", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\QGsV1BZvq4.pptx", lpFilePart=0x0) returned 0x43 [0067.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0067.890] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\QGsV1BZvq4.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\qgsv1bzvq4.pptx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0067.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0067.890] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x17b64 [0067.890] ReadFile (in: hFile=0x270, lpBuffer=0x123dd510, nNumberOfBytesToRead=0x17b64, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x123dd510*, lpNumberOfBytesRead=0x14de68*=0x17b64, lpOverlapped=0x0) returned 1 [0067.894] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\QGsV1BZvq4.pptx", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\QGsV1BZvq4.pptx", lpFilePart=0x0) returned 0x43 [0067.894] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\QGsV1BZvq4.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\qgsv1bzvq4.pptx")) returned 1 [0067.896] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\QGsV1BZvq4.pptx.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\QGsV1BZvq4.pptx.sad", lpFilePart=0x0) returned 0x47 [0067.896] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0067.896] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\QGsV1BZvq4.pptx.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\qgsv1bzvq4.pptx.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0067.896] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0067.899] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0067.899] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0067.899] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0067.899] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0067.899] DrawTextExW (in: hdc=0x8010893, lpchText="204 Files\r\nEncrypted", cchText=20, lprc=0x14dc08, format=0x2400, lpdtp=0x22098a8 | out: lpchText="204 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0067.899] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0067.899] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0067.899] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0067.899] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0067.899] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0067.899] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0067.899] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0067.899] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0067.899] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0067.899] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0067.899] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\syh1tioggl5YEpRQn.odt", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\syh1tioggl5YEpRQn.odt", lpFilePart=0x0) returned 0x49 [0067.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0067.900] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\syh1tioggl5YEpRQn.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\syh1tioggl5yeprqn.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0067.900] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0067.900] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x4e63 [0067.900] ReadFile (in: hFile=0x270, lpBuffer=0x2209f20, nNumberOfBytesToRead=0x4e63, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x2209f20*, lpNumberOfBytesRead=0x14de68*=0x4e63, lpOverlapped=0x0) returned 1 [0067.901] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\syh1tioggl5YEpRQn.odt", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\syh1tioggl5YEpRQn.odt", lpFilePart=0x0) returned 0x49 [0067.901] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\syh1tioggl5YEpRQn.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\syh1tioggl5yeprqn.odt")) returned 1 [0067.902] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\syh1tioggl5YEpRQn.odt.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\syh1tioggl5YEpRQn.odt.sad", lpFilePart=0x0) returned 0x4d [0067.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0067.902] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\syh1tioggl5YEpRQn.odt.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\syh1tioggl5yeprqn.odt.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0067.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0067.904] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0067.904] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0067.905] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0067.905] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0067.905] DrawTextExW (in: hdc=0x8010893, lpchText="205 Files\r\nEncrypted", cchText=20, lprc=0x14dc08, format=0x2400, lpdtp=0x221e908 | out: lpchText="205 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0067.905] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0067.905] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0067.905] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0067.905] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0067.905] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0067.905] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0067.905] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\tbKBK3Tdy.png", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\tbKBK3Tdy.png", lpFilePart=0x0) returned 0x41 [0067.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0067.905] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\tbKBK3Tdy.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\tbkbk3tdy.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0067.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0067.905] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0x8a2a [0067.905] ReadFile (in: hFile=0x270, lpBuffer=0x221ed48, nNumberOfBytesToRead=0x8a2a, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x221ed48*, lpNumberOfBytesRead=0x14de68*=0x8a2a, lpOverlapped=0x0) returned 1 [0067.906] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\tbKBK3Tdy.png", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\tbKBK3Tdy.png", lpFilePart=0x0) returned 0x41 [0067.906] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\tbKBK3Tdy.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\tbkbk3tdy.png")) returned 1 [0067.908] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\tbKBK3Tdy.png.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\tbKBK3Tdy.png.sad", lpFilePart=0x0) returned 0x45 [0067.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0067.908] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\tbKBK3Tdy.png.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\tbkbk3tdy.png.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0067.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0067.910] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0067.910] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0067.910] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0067.910] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0067.910] DrawTextExW (in: hdc=0x8010893, lpchText="206 Files\r\nEncrypted", cchText=20, lprc=0x14dc08, format=0x2400, lpdtp=0x222a190 | out: lpchText="206 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0067.910] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0067.910] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0067.910] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0067.910] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0067.911] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0067.911] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0067.911] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\v3b8gzAUV1jJchs3Akif.swf", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\v3b8gzAUV1jJchs3Akif.swf", lpFilePart=0x0) returned 0x4c [0067.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0067.911] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\v3b8gzAUV1jJchs3Akif.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\v3b8gzauv1jjchs3akif.swf"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0067.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0067.911] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0xb42 [0067.911] ReadFile (in: hFile=0x270, lpBuffer=0x222b178, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x222b178*, lpNumberOfBytesRead=0x14de68*=0xb42, lpOverlapped=0x0) returned 1 [0067.912] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\v3b8gzAUV1jJchs3Akif.swf", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\v3b8gzAUV1jJchs3Akif.swf", lpFilePart=0x0) returned 0x4c [0067.912] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\v3b8gzAUV1jJchs3Akif.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\v3b8gzauv1jjchs3akif.swf")) returned 1 [0067.913] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\v3b8gzAUV1jJchs3Akif.swf.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\v3b8gzAUV1jJchs3Akif.swf.sad", lpFilePart=0x0) returned 0x50 [0067.913] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0067.913] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\v3b8gzAUV1jJchs3Akif.swf.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\v3b8gzauv1jjchs3akif.swf.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0067.913] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0067.914] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0067.914] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0067.914] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0067.914] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0067.914] DrawTextExW (in: hdc=0x8010893, lpchText="207 Files\r\nEncrypted", cchText=20, lprc=0x14dc08, format=0x2400, lpdtp=0x2230a18 | out: lpchText="207 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0067.914] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0067.914] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0067.914] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0067.914] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0067.915] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0067.915] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0067.915] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\Z8Akuiw8nv_CsZ.odt", nBufferLength=0x105, lpBuffer=0x14d8c0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\Z8Akuiw8nv_CsZ.odt", lpFilePart=0x0) returned 0x46 [0067.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dda0) returned 1 [0067.915] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\Z8Akuiw8nv_CsZ.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\z8akuiw8nv_csz.odt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x270 [0067.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dd10) returned 1 [0067.915] GetFileSize (in: hFile=0x270, lpFileSizeHigh=0x14df38 | out: lpFileSizeHigh=0x14df38*=0x0) returned 0xd11e [0067.915] ReadFile (in: hFile=0x270, lpBuffer=0x2230e70, nNumberOfBytesToRead=0xd11e, lpNumberOfBytesRead=0x14de68, lpOverlapped=0x0 | out: lpBuffer=0x2230e70*, lpNumberOfBytesRead=0x14de68*=0xd11e, lpOverlapped=0x0) returned 1 [0067.938] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\Z8Akuiw8nv_CsZ.odt", nBufferLength=0x105, lpBuffer=0x14da60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\Z8Akuiw8nv_CsZ.odt", lpFilePart=0x0) returned 0x46 [0067.938] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\Z8Akuiw8nv_CsZ.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\z8akuiw8nv_csz.odt")) returned 1 [0067.940] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\Z8Akuiw8nv_CsZ.odt.sad", nBufferLength=0x105, lpBuffer=0x14d800, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\Z8Akuiw8nv_CsZ.odt.sad", lpFilePart=0x0) returned 0x4a [0067.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14dce0) returned 1 [0067.940] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\Z8Akuiw8nv_CsZ.odt.sad" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\k130blzotxohq\\z8akuiw8nv_csz.odt.sad"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0067.940] GetFileType (hFile=0x270) returned 0x1 [0067.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dc50) returned 1 [0067.940] GetFileType (hFile=0x270) returned 0x1 [0067.941] WriteFile (in: hFile=0x270, lpBuffer=0x2141bf0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2141bf0*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0067.942] WriteFile (in: hFile=0x270, lpBuffer=0x2141bf0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2141bf0*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0067.942] WriteFile (in: hFile=0x270, lpBuffer=0x2141bf0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2141bf0*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0067.942] WriteFile (in: hFile=0x270, lpBuffer=0x2141bf0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2141bf0*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0067.943] WriteFile (in: hFile=0x270, lpBuffer=0x2141bf0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2141bf0*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0067.943] WriteFile (in: hFile=0x270, lpBuffer=0x2141bf0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2141bf0*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0067.943] WriteFile (in: hFile=0x270, lpBuffer=0x2141bf0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2141bf0*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0067.944] WriteFile (in: hFile=0x270, lpBuffer=0x2141bf0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2141bf0*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0067.944] WriteFile (in: hFile=0x270, lpBuffer=0x2141bf0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2141bf0*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0067.944] WriteFile (in: hFile=0x270, lpBuffer=0x2141bf0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2141bf0*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0067.945] WriteFile (in: hFile=0x270, lpBuffer=0x2141bf0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2141bf0*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0067.945] WriteFile (in: hFile=0x270, lpBuffer=0x2141bf0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2141bf0*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0067.945] WriteFile (in: hFile=0x270, lpBuffer=0x2141bf0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2141bf0*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0067.946] WriteFile (in: hFile=0x270, lpBuffer=0x2141bf0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2141bf0*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0067.946] WriteFile (in: hFile=0x270, lpBuffer=0x2141bf0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2141bf0*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0067.946] WriteFile (in: hFile=0x270, lpBuffer=0x2141bf0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2141bf0*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0067.947] WriteFile (in: hFile=0x270, lpBuffer=0x2141bf0*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x14ddc8, lpOverlapped=0x0 | out: lpBuffer=0x2141bf0*, lpNumberOfBytesWritten=0x14ddc8*=0x1000, lpOverlapped=0x0) returned 1 [0067.947] WriteFile (in: hFile=0x270, lpBuffer=0x2141bf0*, nNumberOfBytesToWrite=0x6d4, lpNumberOfBytesWritten=0x14dd28, lpOverlapped=0x0 | out: lpBuffer=0x2141bf0*, lpNumberOfBytesWritten=0x14dd28*=0x6d4, lpOverlapped=0x0) returned 1 [0067.947] CloseHandle (hObject=0x270) returned 1 [0067.949] GetCurrentActCtx (in: lphActCtx=0x14df30 | out: lphActCtx=0x14df30*=0xa52648) returned 1 [0067.949] PeekMessageW (in: lpMsg=0x14de80, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14de80) returned 0 [0067.949] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0067.950] AdjustWindowRectEx (in: lpRect=0x14dc98, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dc98) returned 1 [0067.950] DrawTextExW (in: hdc=0x8010893, lpchText="208 Files\r\nEncrypted", cchText=20, lprc=0x14dc08, format=0x2400, lpdtp=0x2142df0 | out: lpchText="208 Files\r\nEncrypted", lprc=0x14dc08) returned 26 [0067.950] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0067.950] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0067.950] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0067.950] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0067.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e080) returned 1 [0067.950] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq", nBufferLength=0x105, lpBuffer=0x14db70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq", lpFilePart=0x0) returned 0x33 [0067.950] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\", nBufferLength=0x105, lpBuffer=0x14db10, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\", lpFilePart=0x0) returned 0x34 [0067.950] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\k130BlzOtXoHq\\*", lpFindFileData=0x14dd20 | out: lpFindFileData=0x14dd20) returned 0xa748e0 [0067.950] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0067.950] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0067.951] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0067.951] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0067.951] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0067.951] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0067.951] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0067.952] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0067.952] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0067.952] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0067.952] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0067.952] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0067.952] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0067.953] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0067.953] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 1 [0067.953] FindNextFileW (in: hFindFile=0xa748e0, lpFindFileData=0x14dd70 | out: lpFindFileData=0x14dd70) returned 0 [0067.953] FindClose (in: hFindFile=0xa748e0 | out: hFindFile=0xa748e0) returned 1 [0067.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14dfd0) returned 1 [0067.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14df90) returned 1 [0067.953] GetCurrentActCtx (in: lphActCtx=0x14e0f0 | out: lphActCtx=0x14e0f0*=0xa52648) returned 1 [0067.953] PeekMessageW (in: lpMsg=0x14e040, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e040) returned 0 [0067.953] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0067.953] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0067.953] GetCurrentActCtx (in: lphActCtx=0x14e200 | out: lphActCtx=0x14e200*=0xa52648) returned 1 [0067.954] PeekMessageW (in: lpMsg=0x14e150, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14e150) returned 0 [0067.954] GetCurrentActCtx (in: lphActCtx=0x14e140 | out: lphActCtx=0x14e140*=0xa52648) returned 1 [0067.955] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0067.955] AdjustWindowRectEx (in: lpRect=0x14e060, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x14e060) returned 1 [0067.955] GetCursorPos (in: lpPoint=0x2145990 | out: lpPoint=0x2145990*(x=781, y=505)) returned 1 [0067.955] MonitorFromPoint (pt=0x1f90000030d, dwFlags=0x2) returned 0x10001 [0067.955] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x14de10 | out: lpmi=0x14de10) returned 1 [0067.955] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x38010888 [0067.955] GetDeviceCaps (hdc=0x38010888, index=12) returned 32 [0067.955] GetDeviceCaps (hdc=0x38010888, index=14) returned 1 [0067.955] DeleteDC (hdc=0x38010888) returned 1 [0067.955] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x14dee0 | out: lpmi=0x14dee0) returned 1 [0067.955] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0067.955] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName="Sad Computer", dwStyle=0x2c80000, X=420, Y=180, nWidth=600, nHeight=500, hWndParent=0x0, hMenu=0x0, hInstance=0xcc0000, lpParam=0x0) returned 0x401fa [0067.955] SetWindowLongPtrW (hWnd=0x401fa, nIndex=-4, dwNewLong=0x76f7b0ac) returned 0x1aff131c [0067.956] GetWindowLongPtrW (hWnd=0x401fa, nIndex=-4) returned 0x76f7b0ac [0067.957] SetWindowLongPtrW (hWnd=0x401fa, nIndex=-4, dwNewLong=0x1aff17cc) returned 0x76f7b0ac [0067.957] GetWindowLongPtrW (hWnd=0x401fa, nIndex=-4) returned 0x1aff17cc [0067.957] GetWindowLongPtrW (hWnd=0x401fa, nIndex=-16) returned 0x6c80000 [0067.958] GetSystemMetrics (nIndex=34) returned 132 [0067.958] GetSystemMetrics (nIndex=35) returned 38 [0067.959] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x81, wParam=0x0, lParam=0x14d800) returned 0x1 [0067.959] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x83, wParam=0x0, lParam=0x14d8b0) returned 0x0 [0067.959] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x1, wParam=0x0, lParam=0x14d7d0) returned 0x0 [0067.959] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d250 | out: lpRect=0x14d250) returned 1 [0067.959] GetWindowRect (in: hWnd=0x401fa, lpRect=0x14d250 | out: lpRect=0x14d250) returned 1 [0067.960] SetWindowTextW (hWnd=0x401fa, lpString="Sad Computer") returned 1 [0067.960] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xc, wParam=0x0, lParam=0x211e3e4) returned 0x1 [0067.961] GetStartupInfoW (in: lpStartupInfo=0x2145f00 | out: lpStartupInfo=0x2145f00*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SadComputer.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0067.961] GetParent (hWnd=0x401fa) returned 0x0 [0067.961] SetWindowLongPtrW (hWnd=0x401fa, nIndex=-8, dwNewLong=0x0) returned 0x0 [0067.961] SendMessageW (hWnd=0x401fa, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0067.961] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0067.961] SendMessageW (hWnd=0x401fa, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0067.961] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0067.961] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0067.961] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0067.961] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0067.962] GetSystemMenu (hWnd=0x401fa, bRevert=0) returned 0x5020d [0067.962] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14e148 | out: lpwndpl=0x14e148) returned 1 [0067.962] EnableMenuItem (hMenu=0x5020d, uIDEnableItem=0xf020, uEnable=0x1) returned 0 [0067.962] EnableMenuItem (hMenu=0x5020d, uIDEnableItem=0xf030, uEnable=0x1) returned 0 [0067.962] EnableMenuItem (hMenu=0x5020d, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0067.962] EnableMenuItem (hMenu=0x5020d, uIDEnableItem=0xf120, uEnable=0x1) returned 0 [0067.962] EnableMenuItem (hMenu=0x5020d, uIDEnableItem=0xf000, uEnable=0x1) returned 0 [0067.962] GetClientRect (in: hWnd=0x401fa, lpRect=0x14e210 | out: lpRect=0x14e210) returned 1 [0067.962] GetClientRect (in: hWnd=0x401fa, lpRect=0x14e140 | out: lpRect=0x14e140) returned 1 [0067.962] GetWindowRect (in: hWnd=0x401fa, lpRect=0x14e140 | out: lpRect=0x14e140) returned 1 [0067.962] SetWindowPos (hWnd=0x401fa, hWndInsertAfter=0xffffffffffffffff, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1 [0067.963] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x46, wParam=0x0, lParam=0x14e0d0) returned 0x0 [0067.964] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x46, wParam=0x0, lParam=0x14e0d0) returned 0x0 [0067.964] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x1c, wParam=0x1, lParam=0x6a8) returned 0x0 [0067.964] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301a2, Msg=0x1c, wParam=0x1, lParam=0x6a8) returned 0x0 [0067.964] NtdllDefWindowProc_W (hWnd=0x40120, Msg=0x1c, wParam=0x1, lParam=0x6a8) returned 0x0 [0067.964] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x1c, wParam=0x1, lParam=0x6a8) returned 0x0 [0067.964] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0067.965] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0067.965] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0067.965] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0067.968] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0067.970] GetParent (hWnd=0x401fa) returned 0x0 [0067.972] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0067.973] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14dca8 | out: lpwndpl=0x14dca8) returned 1 [0067.973] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x47, wParam=0x0, lParam=0x14e0d0) returned 0x0 [0067.973] GetClientRect (in: hWnd=0x401fa, lpRect=0x14db40 | out: lpRect=0x14db40) returned 1 [0067.973] GetWindowRect (in: hWnd=0x401fa, lpRect=0x14db40 | out: lpRect=0x14db40) returned 1 [0067.974] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0067.974] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0067.974] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0067.975] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x83, wParam=0x1, lParam=0x14da30) returned 0x0 [0067.975] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0067.975] GetWindowLongPtrW (hWnd=0x401fa, nIndex=-16) returned 0x6c80000 [0067.975] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0067.975] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0067.975] GetSystemMetrics (nIndex=42) returned 0 [0067.975] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14df40, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0067.976] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14df40) returned 0xc [0067.976] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0067.976] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0067.976] GetSystemMetrics (nIndex=42) returned 0 [0067.976] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14df40, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0067.976] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14df40) returned 0xc [0067.976] GetCursorPos (in: lpPoint=0x21462f8 | out: lpPoint=0x21462f8*(x=781, y=505)) returned 1 [0067.976] MonitorFromPoint (pt=0x1f80000030b, dwFlags=0x2) returned 0x10001 [0067.976] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x14dde0 | out: lpmi=0x14dde0) returned 1 [0067.976] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x53010850 [0067.976] GetDeviceCaps (hdc=0x53010850, index=12) returned 32 [0067.976] GetDeviceCaps (hdc=0x53010850, index=14) returned 1 [0067.976] DeleteDC (hdc=0x53010850) returned 1 [0067.976] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x14deb0 | out: lpmi=0x14deb0) returned 1 [0067.976] GetWindowLongPtrW (hWnd=0x401fa, nIndex=-16) returned 0x6c80000 [0067.976] GetWindowLongPtrW (hWnd=0x401fa, nIndex=-20) returned 0x50109 [0067.976] SetWindowLongPtrW (hWnd=0x401fa, nIndex=-16, dwNewLong=0x2c80000) returned 0x6c80000 [0067.976] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x14e020) returned 0x0 [0067.977] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x14e020) returned 0x0 [0067.977] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0067.977] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0067.977] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0067.977] SetWindowLongPtrW (hWnd=0x401fa, nIndex=-20, dwNewLong=0x50001) returned 0x50109 [0067.977] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x14e020) returned 0x0 [0067.977] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x14e020) returned 0x0 [0067.977] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0067.978] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0067.978] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0067.978] SetWindowPos (hWnd=0x401fa, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0067.978] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x46, wParam=0x0, lParam=0x14e070) returned 0x0 [0067.978] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x83, wParam=0x1, lParam=0x14e040) returned 0x0 [0067.978] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14dc48 | out: lpwndpl=0x14dc48) returned 1 [0067.978] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x47, wParam=0x0, lParam=0x14e070) returned 0x0 [0067.978] GetClientRect (in: hWnd=0x401fa, lpRect=0x14dae0 | out: lpRect=0x14dae0) returned 1 [0067.978] GetWindowRect (in: hWnd=0x401fa, lpRect=0x14dae0 | out: lpRect=0x14dae0) returned 1 [0067.979] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0067.979] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0067.979] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0067.979] RedrawWindow (hWnd=0x401fa, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0067.979] GetSystemMenu (hWnd=0x401fa, bRevert=0) returned 0x5020d [0067.979] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14e0e8 | out: lpwndpl=0x14e0e8) returned 1 [0067.979] EnableMenuItem (hMenu=0x5020d, uIDEnableItem=0xf020, uEnable=0x1) returned 1 [0067.979] EnableMenuItem (hMenu=0x5020d, uIDEnableItem=0xf030, uEnable=0x1) returned 1 [0067.979] EnableMenuItem (hMenu=0x5020d, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0067.979] EnableMenuItem (hMenu=0x5020d, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0067.979] EnableMenuItem (hMenu=0x5020d, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0067.979] ShowWindow (hWnd=0x401fa, nCmdShow=5) returned 0 [0067.979] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0067.979] GetCurrentActCtx (in: lphActCtx=0x14db30 | out: lphActCtx=0x14db30*=0xa52648) returned 1 [0067.979] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0067.979] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0067.979] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r12_ad1", lpWindowName="Enter Code", dwStyle=0x5601000b, X=449, Y=400, nWidth=123, nHeight=23, hWndParent=0x401fa, hMenu=0x0, hInstance=0xcc0000, lpParam=0x0) returned 0x301fc [0067.980] SetWindowLongPtrW (hWnd=0x301fc, nIndex=-4, dwNewLong=0x7fefba43b20) returned 0x1aff15ec [0067.980] GetWindowLongPtrW (hWnd=0x301fc, nIndex=-4) returned 0x7fefba43b20 [0067.980] SetWindowLongPtrW (hWnd=0x301fc, nIndex=-4, dwNewLong=0x1b0015ac) returned 0x7fefba43b20 [0067.980] GetWindowLongPtrW (hWnd=0x301fc, nIndex=-4) returned 0x1b0015ac [0067.980] GetWindowLongPtrW (hWnd=0x301fc, nIndex=-16) returned 0x4601000b [0067.980] GetWindowLongPtrW (hWnd=0x301fc, nIndex=-12) returned 0x0 [0067.980] SetWindowLongPtrW (hWnd=0x301fc, nIndex=-12, dwNewLong=0x301fc) returned 0x0 [0067.980] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301fc, Msg=0x81, wParam=0x0, lParam=0x14d1f0) returned 0x1 [0067.981] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301fc, Msg=0x83, wParam=0x0, lParam=0x14d2a0) returned 0x0 [0067.981] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301fc, Msg=0x1, wParam=0x0, lParam=0x14d1d0) returned 0x0 [0067.981] SendMessageW (hWnd=0x301fc, Msg=0x2055, wParam=0x301fc, lParam=0x3) returned 0x2 [0067.981] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0 [0067.981] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301fc, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0067.981] GetWindow (hWnd=0x301fc, uCmd=0x3) returned 0x0 [0067.982] GetClientRect (in: hWnd=0x301fc, lpRect=0x14cbe0 | out: lpRect=0x14cbe0) returned 1 [0067.982] GetWindowRect (in: hWnd=0x301fc, lpRect=0x14cbe0 | out: lpRect=0x14cbe0) returned 1 [0067.982] GetParent (hWnd=0x301fc) returned 0x401fa [0067.982] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x401fa, lpPoints=0x14cbe0, cPoints=0x2 | out: lpPoints=0x14cbe0) returned -13369767 [0067.982] SetWindowTextW (hWnd=0x301fc, lpString="Enter Code") returned 1 [0067.982] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301fc, Msg=0xc, wParam=0x0, lParam=0x212b334) returned 0x1 [0067.982] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301fc, Msg=0x5, wParam=0x0, lParam=0x17007b) returned 0x0 [0067.982] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301fc, Msg=0x3, wParam=0x0, lParam=0x19001c1) returned 0x0 [0067.982] GetClientRect (in: hWnd=0x301fc, lpRect=0x14cd10 | out: lpRect=0x14cd10) returned 1 [0067.982] GetWindowRect (in: hWnd=0x301fc, lpRect=0x14cd10 | out: lpRect=0x14cd10) returned 1 [0067.983] GetParent (hWnd=0x301fc) returned 0x401fa [0067.983] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x401fa, lpPoints=0x14cd10, cPoints=0x2 | out: lpPoints=0x14cd10) returned -13369767 [0067.983] SendMessageW (hWnd=0x301fc, Msg=0x2210, wParam=0x1fc0001, lParam=0x301fc) returned 0x0 [0067.983] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301fc, Msg=0x2210, wParam=0x1fc0001, lParam=0x301fc) returned 0x0 [0067.983] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301fc, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0067.983] GetParent (hWnd=0x301fc) returned 0x401fa [0067.983] GetCurrentActCtx (in: lphActCtx=0x14db30 | out: lphActCtx=0x14db30*=0xa52648) returned 1 [0067.983] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0067.983] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0067.983] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName="4:57", dwStyle=0x5600000d, X=41, Y=135, nWidth=40, nHeight=20, hWndParent=0x401fa, hMenu=0x0, hInstance=0xcc0000, lpParam=0x0) returned 0x201da [0067.983] SetWindowLongPtrW (hWnd=0x201da, nIndex=-4, dwNewLong=0x7fefba461b4) returned 0x1aff154c [0067.983] GetWindowLongPtrW (hWnd=0x201da, nIndex=-4) returned 0x7fefba461b4 [0067.985] SetWindowLongPtrW (hWnd=0x201da, nIndex=-4, dwNewLong=0x1b0015fc) returned 0x7fefba461b4 [0067.985] GetWindowLongPtrW (hWnd=0x201da, nIndex=-4) returned 0x1b0015fc [0067.985] GetWindowLongPtrW (hWnd=0x201da, nIndex=-16) returned 0x4600000d [0067.985] GetWindowLongPtrW (hWnd=0x201da, nIndex=-12) returned 0x0 [0067.985] SetWindowLongPtrW (hWnd=0x201da, nIndex=-12, dwNewLong=0x201da) returned 0x0 [0067.985] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x81, wParam=0x0, lParam=0x14d1f0) returned 0x1 [0067.985] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x83, wParam=0x0, lParam=0x14d2a0) returned 0x0 [0067.985] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x1, wParam=0x0, lParam=0x14d1d0) returned 0x0 [0067.985] GetWindow (hWnd=0x201da, uCmd=0x3) returned 0x301fc [0067.985] GetClientRect (in: hWnd=0x201da, lpRect=0x14cc10 | out: lpRect=0x14cc10) returned 1 [0067.985] GetWindowRect (in: hWnd=0x201da, lpRect=0x14cc10 | out: lpRect=0x14cc10) returned 1 [0067.985] GetParent (hWnd=0x201da) returned 0x401fa [0067.985] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x401fa, lpPoints=0x14cc10, cPoints=0x2 | out: lpPoints=0x14cc10) returned -13369767 [0067.986] SetWindowTextW (hWnd=0x201da, lpString="4:57") returned 1 [0067.986] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xc, wParam=0x0, lParam=0x213263c) returned 0x1 [0067.986] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x5, wParam=0x0, lParam=0x140028) returned 0x0 [0067.986] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x3, wParam=0x0, lParam=0x870029) returned 0x0 [0067.986] GetClientRect (in: hWnd=0x201da, lpRect=0x14cd40 | out: lpRect=0x14cd40) returned 1 [0067.986] GetWindowRect (in: hWnd=0x201da, lpRect=0x14cd40 | out: lpRect=0x14cd40) returned 1 [0067.986] GetParent (hWnd=0x201da) returned 0x401fa [0067.986] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x401fa, lpPoints=0x14cd40, cPoints=0x2 | out: lpPoints=0x14cd40) returned -13369767 [0067.986] SendMessageW (hWnd=0x201da, Msg=0x2210, wParam=0x1da0001, lParam=0x201da) returned 0x0 [0067.986] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x2210, wParam=0x1da0001, lParam=0x201da) returned 0x0 [0067.987] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0067.987] GetParent (hWnd=0x201da) returned 0x401fa [0067.987] GetCurrentActCtx (in: lphActCtx=0x14db30 | out: lphActCtx=0x14db30*=0xa52648) returned 1 [0067.987] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0067.987] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0067.987] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName="Your Files Will Be Deleted on", dwStyle=0x5600000d, X=12, Y=108, nWidth=144, nHeight=13, hWndParent=0x401fa, hMenu=0x0, hInstance=0xcc0000, lpParam=0x0) returned 0x201dc [0067.987] SetWindowLongPtrW (hWnd=0x201dc, nIndex=-4, dwNewLong=0x7fefba461b4) returned 0x1aff154c [0067.987] GetWindowLongPtrW (hWnd=0x201dc, nIndex=-4) returned 0x7fefba461b4 [0067.987] SetWindowLongPtrW (hWnd=0x201dc, nIndex=-4, dwNewLong=0x1b00164c) returned 0x7fefba461b4 [0067.987] GetWindowLongPtrW (hWnd=0x201dc, nIndex=-4) returned 0x1b00164c [0067.987] GetWindowLongPtrW (hWnd=0x201dc, nIndex=-16) returned 0x4600000d [0067.988] GetWindowLongPtrW (hWnd=0x201dc, nIndex=-12) returned 0x0 [0067.988] SetWindowLongPtrW (hWnd=0x201dc, nIndex=-12, dwNewLong=0x201dc) returned 0x0 [0067.988] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201dc, Msg=0x81, wParam=0x0, lParam=0x14d1f0) returned 0x1 [0067.988] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201dc, Msg=0x83, wParam=0x0, lParam=0x14d2a0) returned 0x0 [0067.988] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201dc, Msg=0x1, wParam=0x0, lParam=0x14d1a0) returned 0x0 [0067.988] GetWindow (hWnd=0x201dc, uCmd=0x3) returned 0x201da [0067.988] GetClientRect (in: hWnd=0x201dc, lpRect=0x14cbe0 | out: lpRect=0x14cbe0) returned 1 [0067.988] GetWindowRect (in: hWnd=0x201dc, lpRect=0x14cbe0 | out: lpRect=0x14cbe0) returned 1 [0067.988] GetParent (hWnd=0x201dc) returned 0x401fa [0067.988] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x401fa, lpPoints=0x14cbe0, cPoints=0x2 | out: lpPoints=0x14cbe0) returned -13369767 [0067.989] SetWindowTextW (hWnd=0x201dc, lpString="Your Files Will Be Deleted on") returned 1 [0067.989] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201dc, Msg=0xc, wParam=0x0, lParam=0x212b284) returned 0x1 [0067.989] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201dc, Msg=0x5, wParam=0x0, lParam=0xd0090) returned 0x0 [0067.989] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201dc, Msg=0x3, wParam=0x0, lParam=0x6c000c) returned 0x0 [0067.989] GetClientRect (in: hWnd=0x201dc, lpRect=0x14cd40 | out: lpRect=0x14cd40) returned 1 [0067.989] GetWindowRect (in: hWnd=0x201dc, lpRect=0x14cd40 | out: lpRect=0x14cd40) returned 1 [0067.989] GetParent (hWnd=0x201dc) returned 0x401fa [0067.989] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x401fa, lpPoints=0x14cd40, cPoints=0x2 | out: lpPoints=0x14cd40) returned -13369767 [0067.989] SendMessageW (hWnd=0x201dc, Msg=0x2210, wParam=0x1dc0001, lParam=0x201dc) returned 0x0 [0067.989] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201dc, Msg=0x2210, wParam=0x1dc0001, lParam=0x201dc) returned 0x0 [0067.989] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201dc, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0067.989] GetParent (hWnd=0x201dc) returned 0x401fa [0067.989] GetCurrentActCtx (in: lphActCtx=0x14db30 | out: lphActCtx=0x14db30*=0xa52648) returned 1 [0067.989] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0067.990] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0067.990] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName="208 Files\r\nEncrypted", dwStyle=0x5600000d, X=12, Y=346, nWidth=55, nHeight=26, hWndParent=0x401fa, hMenu=0x0, hInstance=0xcc0000, lpParam=0x0) returned 0x10206 [0067.990] SetWindowLongPtrW (hWnd=0x10206, nIndex=-4, dwNewLong=0x7fefba461b4) returned 0x1aff154c [0067.990] GetWindowLongPtrW (hWnd=0x10206, nIndex=-4) returned 0x7fefba461b4 [0067.990] SetWindowLongPtrW (hWnd=0x10206, nIndex=-4, dwNewLong=0x1b00169c) returned 0x7fefba461b4 [0067.990] GetWindowLongPtrW (hWnd=0x10206, nIndex=-4) returned 0x1b00169c [0067.990] GetWindowLongPtrW (hWnd=0x10206, nIndex=-16) returned 0x4600000d [0067.990] GetWindowLongPtrW (hWnd=0x10206, nIndex=-12) returned 0x0 [0067.990] SetWindowLongPtrW (hWnd=0x10206, nIndex=-12, dwNewLong=0x10206) returned 0x0 [0067.990] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10206, Msg=0x81, wParam=0x0, lParam=0x14d1f0) returned 0x1 [0067.990] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10206, Msg=0x83, wParam=0x0, lParam=0x14d2a0) returned 0x0 [0067.990] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10206, Msg=0x1, wParam=0x0, lParam=0x14d1b0) returned 0x0 [0067.990] GetWindow (hWnd=0x10206, uCmd=0x3) returned 0x201dc [0067.990] GetClientRect (in: hWnd=0x10206, lpRect=0x14cbf0 | out: lpRect=0x14cbf0) returned 1 [0067.990] GetWindowRect (in: hWnd=0x10206, lpRect=0x14cbf0 | out: lpRect=0x14cbf0) returned 1 [0067.991] GetParent (hWnd=0x10206) returned 0x401fa [0067.991] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x401fa, lpPoints=0x14cbf0, cPoints=0x2 | out: lpPoints=0x14cbf0) returned -13369767 [0067.991] SetWindowTextW (hWnd=0x10206, lpString="208 Files\r\nEncrypted") returned 1 [0067.991] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10206, Msg=0xc, wParam=0x0, lParam=0x2142d6c) returned 0x1 [0067.991] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10206, Msg=0x5, wParam=0x0, lParam=0x1a0037) returned 0x0 [0067.991] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10206, Msg=0x3, wParam=0x0, lParam=0x15a000c) returned 0x0 [0067.991] GetClientRect (in: hWnd=0x10206, lpRect=0x14cd40 | out: lpRect=0x14cd40) returned 1 [0067.991] GetWindowRect (in: hWnd=0x10206, lpRect=0x14cd40 | out: lpRect=0x14cd40) returned 1 [0067.991] GetParent (hWnd=0x10206) returned 0x401fa [0067.991] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x401fa, lpPoints=0x14cd40, cPoints=0x2 | out: lpPoints=0x14cd40) returned -13369767 [0067.992] SendMessageW (hWnd=0x10206, Msg=0x2210, wParam=0x2060001, lParam=0x10206) returned 0x0 [0067.992] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10206, Msg=0x2210, wParam=0x2060001, lParam=0x10206) returned 0x0 [0067.992] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10206, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0067.992] GetParent (hWnd=0x10206) returned 0x401fa [0067.992] GetCurrentActCtx (in: lphActCtx=0x14db30 | out: lphActCtx=0x14db30*=0xa52648) returned 1 [0067.992] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0067.992] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0067.992] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName="Bitcoin Address:", dwStyle=0x5600000d, X=118, Y=403, nWidth=87, nHeight=15, hWndParent=0x401fa, hMenu=0x0, hInstance=0xcc0000, lpParam=0x0) returned 0x10208 [0067.992] SetWindowLongPtrW (hWnd=0x10208, nIndex=-4, dwNewLong=0x7fefba461b4) returned 0x1aff154c [0067.992] GetWindowLongPtrW (hWnd=0x10208, nIndex=-4) returned 0x7fefba461b4 [0067.992] SetWindowLongPtrW (hWnd=0x10208, nIndex=-4, dwNewLong=0x1b0016ec) returned 0x7fefba461b4 [0067.993] GetWindowLongPtrW (hWnd=0x10208, nIndex=-4) returned 0x1b0016ec [0067.993] GetWindowLongPtrW (hWnd=0x10208, nIndex=-16) returned 0x4600000d [0067.993] GetWindowLongPtrW (hWnd=0x10208, nIndex=-12) returned 0x0 [0067.993] SetWindowLongPtrW (hWnd=0x10208, nIndex=-12, dwNewLong=0x10208) returned 0x0 [0067.993] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10208, Msg=0x81, wParam=0x0, lParam=0x14d1f0) returned 0x1 [0067.993] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10208, Msg=0x83, wParam=0x0, lParam=0x14d2a0) returned 0x0 [0067.993] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10208, Msg=0x1, wParam=0x0, lParam=0x14d1c0) returned 0x0 [0067.993] GetWindow (hWnd=0x10208, uCmd=0x3) returned 0x10206 [0067.993] GetClientRect (in: hWnd=0x10208, lpRect=0x14cc00 | out: lpRect=0x14cc00) returned 1 [0067.993] GetWindowRect (in: hWnd=0x10208, lpRect=0x14cc00 | out: lpRect=0x14cc00) returned 1 [0067.993] GetParent (hWnd=0x10208) returned 0x401fa [0067.993] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x401fa, lpPoints=0x14cc00, cPoints=0x2 | out: lpPoints=0x14cc00) returned -13369767 [0067.994] SetWindowTextW (hWnd=0x10208, lpString="Bitcoin Address:") returned 1 [0067.994] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10208, Msg=0xc, wParam=0x0, lParam=0x212b1f4) returned 0x1 [0067.994] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10208, Msg=0x5, wParam=0x0, lParam=0xf0057) returned 0x0 [0067.994] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10208, Msg=0x3, wParam=0x0, lParam=0x1930076) returned 0x0 [0067.994] GetClientRect (in: hWnd=0x10208, lpRect=0x14cd40 | out: lpRect=0x14cd40) returned 1 [0067.994] GetWindowRect (in: hWnd=0x10208, lpRect=0x14cd40 | out: lpRect=0x14cd40) returned 1 [0067.994] GetParent (hWnd=0x10208) returned 0x401fa [0067.994] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x401fa, lpPoints=0x14cd40, cPoints=0x2 | out: lpPoints=0x14cd40) returned -13369767 [0067.994] SendMessageW (hWnd=0x10208, Msg=0x2210, wParam=0x2080001, lParam=0x10208) returned 0x0 [0067.994] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10208, Msg=0x2210, wParam=0x2080001, lParam=0x10208) returned 0x0 [0067.994] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10208, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0067.994] GetParent (hWnd=0x10208) returned 0x401fa [0067.994] GetCurrentActCtx (in: lphActCtx=0x14daf0 | out: lphActCtx=0x14daf0*=0xa52648) returned 1 [0067.994] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0067.994] GetClassInfoW (in: hInstance=0x0, lpClassName="EDIT", lpWndClass=0x2146ee0 | out: lpWndClass=0x2146ee0) returned 1 [0067.995] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0067.995] CoTaskMemAlloc (cb=0x54) returned 0xa748e0 [0067.995] RegisterClassW (lpWndClass=0x14d7d0) returned 0xc145 [0067.995] CoTaskMemFree (pv=0xa748e0) [0067.995] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0067.995] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r12_ad1", lpWindowName="1BvBMSEYstWetqTFn5Au4m4GFg7xJaNVN2", dwStyle=0x5e0100c0, X=205, Y=400, nWidth=238, nHeight=20, hWndParent=0x401fa, hMenu=0x0, hInstance=0xcc0000, lpParam=0x0) returned 0x1020a [0067.995] SetWindowLongPtrW (hWnd=0x1020a, nIndex=-4, dwNewLong=0x7fefba4975c) returned 0x1b00173c [0067.996] GetWindowLongPtrW (hWnd=0x1020a, nIndex=-4) returned 0x7fefba4975c [0067.996] SetWindowLongPtrW (hWnd=0x1020a, nIndex=-4, dwNewLong=0x1b00178c) returned 0x7fefba4975c [0067.996] GetWindowLongPtrW (hWnd=0x1020a, nIndex=-4) returned 0x1b00178c [0067.996] GetWindowLongPtrW (hWnd=0x1020a, nIndex=-16) returned 0x4e0100c0 [0067.996] GetWindowLongPtrW (hWnd=0x1020a, nIndex=-12) returned 0x0 [0067.996] SetWindowLongPtrW (hWnd=0x1020a, nIndex=-12, dwNewLong=0x1020a) returned 0x0 [0067.996] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020a, Msg=0x81, wParam=0x0, lParam=0x14d1b0) returned 0x1 [0067.997] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020a, Msg=0x83, wParam=0x0, lParam=0x14d260) returned 0x0 [0067.997] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020a, Msg=0x1, wParam=0x0, lParam=0x14d160) returned 0x1 [0067.997] SendMessageW (hWnd=0x1020a, Msg=0x2111, wParam=0x400020a, lParam=0x1020a) returned 0x0 [0067.997] SendMessageW (hWnd=0x1020a, Msg=0x2111, wParam=0x300020a, lParam=0x1020a) returned 0x0 [0067.998] SendMessageW (hWnd=0x1020a, Msg=0x2055, wParam=0x1020a, lParam=0x3) returned 0x2 [0067.998] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0 [0067.998] GetWindow (hWnd=0x1020a, uCmd=0x3) returned 0x10208 [0067.998] GetClientRect (in: hWnd=0x1020a, lpRect=0x14cbd0 | out: lpRect=0x14cbd0) returned 1 [0067.998] GetWindowRect (in: hWnd=0x1020a, lpRect=0x14cbd0 | out: lpRect=0x14cbd0) returned 1 [0067.998] GetParent (hWnd=0x1020a) returned 0x401fa [0067.998] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x401fa, lpPoints=0x14cbd0, cPoints=0x2 | out: lpPoints=0x14cbd0) returned -13369767 [0067.999] SendMessageW (hWnd=0x1020a, Msg=0x30, wParam=0x60a0875, lParam=0x0) returned 0x1 [0067.999] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020a, Msg=0x30, wParam=0x60a0875, lParam=0x0) returned 0x1 [0067.999] SendMessageW (hWnd=0x1020a, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0067.999] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020a, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0068.004] SetWindowTextW (hWnd=0x1020a, lpString="1BvBMSEYstWetqTFn5Au4m4GFg7xJaNVN2") returned 1 [0068.004] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020a, Msg=0xc, wParam=0x0, lParam=0x212b16c) returned 0x1 [0068.004] SendMessageW (hWnd=0x1020a, Msg=0x2111, wParam=0x400020a, lParam=0x1020a) returned 0x0 [0068.005] SendMessageW (hWnd=0x1020a, Msg=0x2111, wParam=0x300020a, lParam=0x1020a) returned 0x0 [0068.005] GetSystemMetrics (nIndex=5) returned 1 [0068.005] GetSystemMetrics (nIndex=6) returned 1 [0068.005] SendMessageW (hWnd=0x1020a, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0068.005] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020a, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0068.005] SendMessageW (hWnd=0x1020a, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0068.005] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020a, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0068.005] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020a, Msg=0x5, wParam=0x0, lParam=0x1000ea) returned 0x0 [0068.005] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020a, Msg=0x3, wParam=0x0, lParam=0x19200cf) returned 0x0 [0068.005] GetClientRect (in: hWnd=0x1020a, lpRect=0x14cd30 | out: lpRect=0x14cd30) returned 1 [0068.005] GetWindowRect (in: hWnd=0x1020a, lpRect=0x14cd30 | out: lpRect=0x14cd30) returned 1 [0068.005] GetParent (hWnd=0x1020a) returned 0x401fa [0068.005] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x401fa, lpPoints=0x14cd30, cPoints=0x2 | out: lpPoints=0x14cd30) returned -13369767 [0068.005] SendMessageW (hWnd=0x1020a, Msg=0x2210, wParam=0x20a0001, lParam=0x1020a) returned 0x0 [0068.005] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020a, Msg=0x2210, wParam=0x20a0001, lParam=0x1020a) returned 0x0 [0068.005] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0068.005] GetParent (hWnd=0x1020a) returned 0x401fa [0068.005] GetCurrentActCtx (in: lphActCtx=0x14db30 | out: lphActCtx=0x14db30*=0xa52648) returned 1 [0068.005] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0068.005] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0068.005] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r12_ad1", lpWindowName="Check", dwStyle=0x5601000b, X=164, Y=426, nWidth=408, nHeight=23, hWndParent=0x401fa, hMenu=0x0, hInstance=0xcc0000, lpParam=0x0) returned 0x1020c [0068.006] SetWindowLongPtrW (hWnd=0x1020c, nIndex=-4, dwNewLong=0x7fefba43b20) returned 0x1aff15ec [0068.006] GetWindowLongPtrW (hWnd=0x1020c, nIndex=-4) returned 0x7fefba43b20 [0068.006] SetWindowLongPtrW (hWnd=0x1020c, nIndex=-4, dwNewLong=0x1b0017dc) returned 0x7fefba43b20 [0068.006] GetWindowLongPtrW (hWnd=0x1020c, nIndex=-4) returned 0x1b0017dc [0068.006] GetWindowLongPtrW (hWnd=0x1020c, nIndex=-16) returned 0x4601000b [0068.006] GetWindowLongPtrW (hWnd=0x1020c, nIndex=-12) returned 0x0 [0068.006] SetWindowLongPtrW (hWnd=0x1020c, nIndex=-12, dwNewLong=0x1020c) returned 0x0 [0068.006] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x81, wParam=0x0, lParam=0x14d1f0) returned 0x1 [0068.006] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x83, wParam=0x0, lParam=0x14d2a0) returned 0x0 [0068.006] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x1, wParam=0x0, lParam=0x14d1d0) returned 0x0 [0068.006] SendMessageW (hWnd=0x1020c, Msg=0x2055, wParam=0x1020c, lParam=0x3) returned 0x2 [0068.006] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0 [0068.006] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0068.006] GetWindow (hWnd=0x1020c, uCmd=0x3) returned 0x1020a [0068.006] GetClientRect (in: hWnd=0x1020c, lpRect=0x14cbe0 | out: lpRect=0x14cbe0) returned 1 [0068.006] GetWindowRect (in: hWnd=0x1020c, lpRect=0x14cbe0 | out: lpRect=0x14cbe0) returned 1 [0068.006] GetParent (hWnd=0x1020c) returned 0x401fa [0068.006] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x401fa, lpPoints=0x14cbe0, cPoints=0x2 | out: lpPoints=0x14cbe0) returned -13369767 [0068.007] SetWindowTextW (hWnd=0x1020c, lpString="Check") returned 1 [0068.007] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0xc, wParam=0x0, lParam=0x212b114) returned 0x1 [0068.007] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x5, wParam=0x0, lParam=0x170198) returned 0x0 [0068.007] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x3, wParam=0x0, lParam=0x1aa00a4) returned 0x0 [0068.007] GetClientRect (in: hWnd=0x1020c, lpRect=0x14cd10 | out: lpRect=0x14cd10) returned 1 [0068.007] GetWindowRect (in: hWnd=0x1020c, lpRect=0x14cd10 | out: lpRect=0x14cd10) returned 1 [0068.007] GetParent (hWnd=0x1020c) returned 0x401fa [0068.007] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x401fa, lpPoints=0x14cd10, cPoints=0x2 | out: lpPoints=0x14cd10) returned -13369767 [0068.007] SendMessageW (hWnd=0x1020c, Msg=0x2210, wParam=0x20c0001, lParam=0x1020c) returned 0x0 [0068.007] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x2210, wParam=0x20c0001, lParam=0x1020c) returned 0x0 [0068.007] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0068.007] GetParent (hWnd=0x1020c) returned 0x401fa [0068.007] GetCurrentActCtx (in: lphActCtx=0x14daf0 | out: lphActCtx=0x14daf0*=0xa52648) returned 1 [0068.008] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0068.008] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0068.008] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r12_ad1", lpWindowName="Q: What Happend to my computer?\r\nA: Your Files Have Been Encrypted.\r\n\r\nQ: How Do i restore the files?\r\nA: You need to use bitcoin to restore the files.\r\n\r\nQ: Can i use other methods?\r\nA: Yes. You can use Paypal.\r\n\r\nQ: How can i trust?\r\nA: We dont cheat users. We restore the files.", dwStyle=0x5e010044, X=164, Y=36, nWidth=408, nHeight=357, hWndParent=0x401fa, hMenu=0x0, hInstance=0xcc0000, lpParam=0x0) returned 0x1020e [0068.008] SetWindowLongPtrW (hWnd=0x1020e, nIndex=-4, dwNewLong=0x7fefba4975c) returned 0x1b00173c [0068.008] GetWindowLongPtrW (hWnd=0x1020e, nIndex=-4) returned 0x7fefba4975c [0068.008] SetWindowLongPtrW (hWnd=0x1020e, nIndex=-4, dwNewLong=0x1b00182c) returned 0x7fefba4975c [0068.008] GetWindowLongPtrW (hWnd=0x1020e, nIndex=-4) returned 0x1b00182c [0068.008] GetWindowLongPtrW (hWnd=0x1020e, nIndex=-16) returned 0x4e010044 [0068.008] GetWindowLongPtrW (hWnd=0x1020e, nIndex=-12) returned 0x0 [0068.008] SetWindowLongPtrW (hWnd=0x1020e, nIndex=-12, dwNewLong=0x1020e) returned 0x0 [0068.008] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020e, Msg=0x81, wParam=0x0, lParam=0x14d1b0) returned 0x1 [0068.008] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020e, Msg=0x83, wParam=0x0, lParam=0x14d260) returned 0x0 [0068.009] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020e, Msg=0x1, wParam=0x0, lParam=0x14cf70) returned 0x1 [0068.010] GetWindow (hWnd=0x1020e, uCmd=0x3) returned 0x1020c [0068.010] GetClientRect (in: hWnd=0x1020e, lpRect=0x14c9e0 | out: lpRect=0x14c9e0) returned 1 [0068.010] GetWindowRect (in: hWnd=0x1020e, lpRect=0x14c9e0 | out: lpRect=0x14c9e0) returned 1 [0068.010] GetParent (hWnd=0x1020e) returned 0x401fa [0068.010] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x401fa, lpPoints=0x14c9e0, cPoints=0x2 | out: lpPoints=0x14c9e0) returned -13369767 [0068.011] GetDC (hWnd=0x0) returned 0x5010830 [0068.011] GdipCreateFromHDC (hdc=0x5010830, graphics=0x14c6a8) returned 0x0 [0068.011] CoTaskMemAlloc (cb=0x5c) returned 0xa5ed70 [0068.011] GdipGetLogFontW (font=0x1af4c4b0, graphics=0x1afd8140, logfontW=0xa5ed70) returned 0x0 [0068.011] CoTaskMemFree (pv=0xa5ed70) [0068.011] CoTaskMemAlloc (cb=0x5c) returned 0xa5ed70 [0068.011] CoTaskMemFree (pv=0xa5ed70) [0068.011] CoTaskMemAlloc (cb=0x5c) returned 0xa5ed70 [0068.011] CoTaskMemFree (pv=0xa5ed70) [0068.011] GdipDeleteGraphics (graphics=0x1afd8140) returned 0x0 [0068.011] ReleaseDC (hWnd=0x0, hDC=0x5010830) returned 1 [0068.011] CoTaskMemAlloc (cb=0x5c) returned 0xa5ed70 [0068.011] CreateFontIndirectW (lplf=0xa5ed70) returned 0x5d0a0850 [0068.011] CoTaskMemFree (pv=0xa5ed70) [0068.011] SendMessageW (hWnd=0x1020e, Msg=0x30, wParam=0x5d0a0850, lParam=0x0) returned 0x1 [0068.011] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020e, Msg=0x30, wParam=0x5d0a0850, lParam=0x0) returned 0x1 [0068.025] SetWindowTextW (hWnd=0x1020e, lpString="Q: What Happend to my computer?\r\nA: Your Files Have Been Encrypted.\r\n\r\nQ: How Do i restore the files?\r\nA: You need to use bitcoin to restore the files.\r\n\r\nQ: Can i use other methods?\r\nA: Yes. You can use Paypal.\r\n\r\nQ: How can i trust?\r\nA: We dont cheat users. We restore the files.") returned 1 [0068.025] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020e, Msg=0xc, wParam=0x0, lParam=0x212d70c) returned 0x1 [0068.025] GetSystemMetrics (nIndex=5) returned 1 [0068.025] GetSystemMetrics (nIndex=6) returned 1 [0068.025] SendMessageW (hWnd=0x1020e, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0068.025] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020e, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0068.025] SendMessageW (hWnd=0x1020e, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0068.025] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020e, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0068.025] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020e, Msg=0x5, wParam=0x0, lParam=0x1610194) returned 0x1 [0068.026] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020e, Msg=0x3, wParam=0x0, lParam=0x2600a6) returned 0x0 [0068.026] GetClientRect (in: hWnd=0x1020e, lpRect=0x14cd30 | out: lpRect=0x14cd30) returned 1 [0068.026] GetWindowRect (in: hWnd=0x1020e, lpRect=0x14cd30 | out: lpRect=0x14cd30) returned 1 [0068.026] GetParent (hWnd=0x1020e) returned 0x401fa [0068.026] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x401fa, lpPoints=0x14cd30, cPoints=0x2 | out: lpPoints=0x14cd30) returned -13369767 [0068.026] SendMessageW (hWnd=0x1020e, Msg=0x2210, wParam=0x20e0001, lParam=0x1020e) returned 0x0 [0068.026] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020e, Msg=0x2210, wParam=0x20e0001, lParam=0x1020e) returned 0x0 [0068.026] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0068.026] GetParent (hWnd=0x1020e) returned 0x401fa [0068.026] GetCurrentActCtx (in: lphActCtx=0x14db30 | out: lphActCtx=0x14db30*=0xa52648) returned 1 [0068.026] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0068.026] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0068.026] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName="Your Files are Encrypted", dwStyle=0x5600000d, X=244, Y=10, nWidth=216, nHeight=23, hWndParent=0x401fa, hMenu=0x0, hInstance=0xcc0000, lpParam=0x0) returned 0x10210 [0068.026] SetWindowLongPtrW (hWnd=0x10210, nIndex=-4, dwNewLong=0x7fefba461b4) returned 0x1aff154c [0068.026] GetWindowLongPtrW (hWnd=0x10210, nIndex=-4) returned 0x7fefba461b4 [0068.026] SetWindowLongPtrW (hWnd=0x10210, nIndex=-4, dwNewLong=0x1b00187c) returned 0x7fefba461b4 [0068.027] GetWindowLongPtrW (hWnd=0x10210, nIndex=-4) returned 0x1b00187c [0068.027] GetWindowLongPtrW (hWnd=0x10210, nIndex=-16) returned 0x4600000d [0068.027] GetWindowLongPtrW (hWnd=0x10210, nIndex=-12) returned 0x0 [0068.027] SetWindowLongPtrW (hWnd=0x10210, nIndex=-12, dwNewLong=0x10210) returned 0x0 [0068.027] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10210, Msg=0x81, wParam=0x0, lParam=0x14d1f0) returned 0x1 [0068.027] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10210, Msg=0x83, wParam=0x0, lParam=0x14d2a0) returned 0x0 [0068.027] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10210, Msg=0x1, wParam=0x0, lParam=0x14d1b0) returned 0x0 [0068.027] GetWindow (hWnd=0x10210, uCmd=0x3) returned 0x1020e [0068.027] GetClientRect (in: hWnd=0x10210, lpRect=0x14cbf0 | out: lpRect=0x14cbf0) returned 1 [0068.027] GetWindowRect (in: hWnd=0x10210, lpRect=0x14cbf0 | out: lpRect=0x14cbf0) returned 1 [0068.027] GetParent (hWnd=0x10210) returned 0x401fa [0068.027] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x401fa, lpPoints=0x14cbf0, cPoints=0x2 | out: lpPoints=0x14cbf0) returned -13369767 [0068.027] SetWindowTextW (hWnd=0x10210, lpString="Your Files are Encrypted") returned 1 [0068.027] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10210, Msg=0xc, wParam=0x0, lParam=0x212b014) returned 0x1 [0068.028] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10210, Msg=0x5, wParam=0x0, lParam=0x1700d8) returned 0x0 [0068.028] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10210, Msg=0x3, wParam=0x0, lParam=0xa00f4) returned 0x0 [0068.028] GetClientRect (in: hWnd=0x10210, lpRect=0x14cd40 | out: lpRect=0x14cd40) returned 1 [0068.028] GetWindowRect (in: hWnd=0x10210, lpRect=0x14cd40 | out: lpRect=0x14cd40) returned 1 [0068.028] GetParent (hWnd=0x10210) returned 0x401fa [0068.028] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x401fa, lpPoints=0x14cd40, cPoints=0x2 | out: lpPoints=0x14cd40) returned -13369767 [0068.028] SendMessageW (hWnd=0x10210, Msg=0x2210, wParam=0x2100001, lParam=0x10210) returned 0x0 [0068.028] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10210, Msg=0x2210, wParam=0x2100001, lParam=0x10210) returned 0x0 [0068.028] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10210, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0068.028] GetParent (hWnd=0x10210) returned 0x401fa [0068.028] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0068.028] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0068.028] GetSystemMetrics (nIndex=42) returned 0 [0068.028] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14daa0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0068.028] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14daa0) returned 0xc [0068.035] GetFocus () returned 0x401fa [0068.035] IsChild (hWndParent=0x301d2, hWnd=0x401fa) returned 0 [0068.035] ShowWindow (hWnd=0x301d2, nCmdShow=0) returned 1 [0068.035] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x18, wParam=0x0, lParam=0x0) returned 0x0 [0068.035] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x46, wParam=0x0, lParam=0x14d9c0) returned 0x0 [0068.035] GetWindowPlacement (in: hWnd=0x301d2, lpwndpl=0x14d598 | out: lpwndpl=0x14d598) returned 1 [0068.035] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x47, wParam=0x0, lParam=0x14d9c0) returned 0x0 [0068.035] GetClientRect (in: hWnd=0x301d2, lpRect=0x14d430 | out: lpRect=0x14d430) returned 1 [0068.035] GetWindowRect (in: hWnd=0x301d2, lpRect=0x14d430 | out: lpRect=0x14d430) returned 1 [0068.035] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0068.035] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0068.035] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0068.036] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x5, wParam=0x1, lParam=0x0) returned 0x0 [0068.036] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x3, wParam=0x0, lParam=0xffffffff83008300) returned 0x0 [0068.036] GetClientRect (in: hWnd=0x301d2, lpRect=0x14d4c0 | out: lpRect=0x14d4c0) returned 1 [0068.036] GetWindowRect (in: hWnd=0x301d2, lpRect=0x14d4c0 | out: lpRect=0x14d4c0) returned 1 [0068.036] InvalidateRect (hWnd=0x301fc, lpRect=0x0, bErase=0) returned 1 [0068.036] InvalidateRect (hWnd=0x201da, lpRect=0x0, bErase=1) returned 1 [0068.037] InvalidateRect (hWnd=0x201dc, lpRect=0x0, bErase=1) returned 1 [0068.037] InvalidateRect (hWnd=0x10206, lpRect=0x0, bErase=1) returned 1 [0068.037] InvalidateRect (hWnd=0x10208, lpRect=0x0, bErase=1) returned 1 [0068.037] InvalidateRect (hWnd=0x1020a, lpRect=0x0, bErase=1) returned 1 [0068.037] InvalidateRect (hWnd=0x1020c, lpRect=0x0, bErase=0) returned 1 [0068.037] InvalidateRect (hWnd=0x1020e, lpRect=0x0, bErase=1) returned 1 [0068.037] InvalidateRect (hWnd=0x10210, lpRect=0x0, bErase=1) returned 1 [0068.037] GetWindowThreadProcessId (in: hWnd=0x401fa, lpdwProcessId=0x14db70 | out: lpdwProcessId=0x14db70) returned 0xa50 [0068.037] GetCurrentThreadId () returned 0xa50 [0068.038] RegisterClipboardFormatW (lpszFormat="WindowsForms12_ThreadCallbackMessage") returned 0xc146 [0068.039] PostMessageW (hWnd=0x401fa, Msg=0xc146, wParam=0x0, lParam=0x0) returned 1 [0068.039] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0068.039] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0068.039] GetSystemMetrics (nIndex=42) returned 0 [0068.039] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14da70, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0068.039] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14da70) returned 0xc [0068.039] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x46, wParam=0x0, lParam=0x14e280) returned 0x0 [0068.040] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0068.041] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0068.041] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0068.041] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0068.041] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14de78 | out: lpwndpl=0x14de78) returned 1 [0068.041] GetClientRect (in: hWnd=0x401fa, lpRect=0x14dd90 | out: lpRect=0x14dd90) returned 1 [0068.042] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0068.042] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0068.042] GetSystemMetrics (nIndex=42) returned 0 [0068.042] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14daf0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0068.042] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14daf0) returned 0xc [0068.042] GetClientRect (in: hWnd=0x401fa, lpRect=0x14db78 | out: lpRect=0x14db78) returned 1 [0068.050] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x1b0018cc, dwData=0x0) returned 1 [0068.050] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x14d370 | out: lpmi=0x14d370) returned 1 [0068.050] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x5301007f [0068.050] GetDeviceCaps (hdc=0x5301007f, index=12) returned 32 [0068.050] GetDeviceCaps (hdc=0x5301007f, index=14) returned 1 [0068.050] DeleteDC (hdc=0x5301007f) returned 1 [0068.050] GetCurrentObject (hdc=0x5010830, type=0x1) returned 0x1b00017 [0068.050] GetCurrentObject (hdc=0x5010830, type=0x2) returned 0x1900010 [0068.050] GetCurrentObject (hdc=0x5010830, type=0x7) returned 0x1050032 [0068.050] GetCurrentObject (hdc=0x5010830, type=0x6) returned 0x18a002e [0068.050] SaveDC (hdc=0x5010830) returned 1 [0068.051] GetNearestColor (hdc=0x5010830, color=0xa0) returned 0xa0 [0068.053] CreateSolidBrush (color=0xa0) returned 0x1a100860 [0068.054] FillRect (hDC=0x5010830, lprc=0x14d868, hbr=0x1a100860) returned 1 [0068.054] DeleteObject (ho=0x1a100860) returned 1 [0068.055] RestoreDC (hdc=0x5010830, nSavedDC=-1) returned 1 [0068.058] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301fc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0068.058] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301fc, Msg=0x14, wParam=0x5010830, lParam=0x0) returned 0x1 [0068.058] GetStockObject (i=5) returned 0x1900015 [0068.058] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0068.058] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201dc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0068.059] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10206, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0068.059] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10208, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0068.059] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0068.060] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x138, wParam=0x5010830, lParam=0x1020a) returned 0x1100059 [0068.060] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14d518 | out: lpwndpl=0x14d518) returned 1 [0068.060] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d430 | out: lpRect=0x14d430) returned 1 [0068.060] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0068.060] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0068.060] GetSystemMetrics (nIndex=42) returned 0 [0068.060] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d190, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0068.060] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d190) returned 0xc [0068.060] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d218 | out: lpRect=0x14d218) returned 1 [0068.060] GetCurrentObject (hdc=0x6101007f, type=0x1) returned 0x1b00017 [0068.060] GetCurrentObject (hdc=0x6101007f, type=0x2) returned 0x1900010 [0068.060] GetCurrentObject (hdc=0x6101007f, type=0x7) returned 0x4005024b [0068.060] GetCurrentObject (hdc=0x6101007f, type=0x6) returned 0x18a002e [0068.060] SaveDC (hdc=0x6101007f) returned 1 [0068.060] GetNearestColor (hdc=0x6101007f, color=0xa0) returned 0xa0 [0068.060] CreateSolidBrush (color=0xa0) returned 0x1b100860 [0068.060] FillRect (hDC=0x6101007f, lprc=0x14cf08, hbr=0x1b100860) returned 1 [0068.061] DeleteObject (ho=0x1b100860) returned 1 [0068.061] RestoreDC (hdc=0x6101007f, nSavedDC=-1) returned 1 [0068.061] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0068.061] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0068.061] GetSystemMetrics (nIndex=42) returned 0 [0068.061] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d0c0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0068.061] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d0c0) returned 0xc [0068.061] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d148 | out: lpRect=0x14d148) returned 1 [0068.061] GetCurrentObject (hdc=0x6101007f, type=0x1) returned 0x1b00017 [0068.061] GetCurrentObject (hdc=0x6101007f, type=0x2) returned 0x1900010 [0068.061] GetCurrentObject (hdc=0x6101007f, type=0x7) returned 0x4005024b [0068.061] GetCurrentObject (hdc=0x6101007f, type=0x6) returned 0x18a002e [0068.061] SaveDC (hdc=0x6101007f) returned 1 [0068.062] GetNearestColor (hdc=0x6101007f, color=0xa0) returned 0xa0 [0068.062] CreateSolidBrush (color=0xa0) returned 0x1c100860 [0068.062] FillRect (hDC=0x6101007f, lprc=0x14ce38, hbr=0x1c100860) returned 1 [0068.062] DeleteObject (ho=0x1c100860) returned 1 [0068.062] RestoreDC (hdc=0x6101007f, nSavedDC=-1) returned 1 [0068.062] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0068.062] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0068.062] GetSystemMetrics (nIndex=42) returned 0 [0068.062] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d0c0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0068.062] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d0c0) returned 0xc [0068.063] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020a, Msg=0x14, wParam=0x5010830, lParam=0x0) returned 0x1 [0068.063] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0068.063] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x14, wParam=0x5010825, lParam=0x0) returned 0x1 [0068.063] GetStockObject (i=5) returned 0x1900015 [0068.063] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0068.063] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x138, wParam=0x5010830, lParam=0x1020e) returned 0x1100059 [0068.064] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14d518 | out: lpwndpl=0x14d518) returned 1 [0068.064] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d430 | out: lpRect=0x14d430) returned 1 [0068.064] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0068.064] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0068.064] GetSystemMetrics (nIndex=42) returned 0 [0068.064] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d190, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0068.064] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d190) returned 0xc [0068.064] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d218 | out: lpRect=0x14d218) returned 1 [0068.064] GetCurrentObject (hdc=0x4101024b, type=0x1) returned 0x1b00017 [0068.064] GetCurrentObject (hdc=0x4101024b, type=0x2) returned 0x1900010 [0068.064] GetCurrentObject (hdc=0x4101024b, type=0x7) returned 0x6205007f [0068.064] GetCurrentObject (hdc=0x4101024b, type=0x6) returned 0x18a002e [0068.064] SaveDC (hdc=0x4101024b) returned 1 [0068.064] GetNearestColor (hdc=0x4101024b, color=0xa0) returned 0xa0 [0068.064] CreateSolidBrush (color=0xa0) returned 0x1d100860 [0068.064] FillRect (hDC=0x4101024b, lprc=0x14cf08, hbr=0x1d100860) returned 1 [0068.064] DeleteObject (ho=0x1d100860) returned 1 [0068.064] RestoreDC (hdc=0x4101024b, nSavedDC=-1) returned 1 [0068.065] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0068.065] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0068.065] GetSystemMetrics (nIndex=42) returned 0 [0068.065] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d0c0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0068.065] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d0c0) returned 0xc [0068.065] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d148 | out: lpRect=0x14d148) returned 1 [0068.065] GetCurrentObject (hdc=0x4101024b, type=0x1) returned 0x1b00017 [0068.065] GetCurrentObject (hdc=0x4101024b, type=0x2) returned 0x1900010 [0068.065] GetCurrentObject (hdc=0x4101024b, type=0x7) returned 0x6205007f [0068.065] GetCurrentObject (hdc=0x4101024b, type=0x6) returned 0x18a002e [0068.065] SaveDC (hdc=0x4101024b) returned 1 [0068.065] GetNearestColor (hdc=0x4101024b, color=0xa0) returned 0xa0 [0068.065] CreateSolidBrush (color=0xa0) returned 0x1e100860 [0068.065] FillRect (hDC=0x4101024b, lprc=0x14ce38, hbr=0x1e100860) returned 1 [0068.065] DeleteObject (ho=0x1e100860) returned 1 [0068.065] RestoreDC (hdc=0x4101024b, nSavedDC=-1) returned 1 [0068.065] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0068.065] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0068.065] GetSystemMetrics (nIndex=42) returned 0 [0068.065] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d0c0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0068.065] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d0c0) returned 0xc [0068.066] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020e, Msg=0x14, wParam=0x5010830, lParam=0x0) returned 0x1 [0068.066] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x138, wParam=0x5010830, lParam=0x1020e) returned 0x1100059 [0068.066] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10210, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0068.066] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14de58 | out: lpwndpl=0x14de58) returned 1 [0068.066] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x47, wParam=0x0, lParam=0x14e280) returned 0x0 [0068.067] GetClientRect (in: hWnd=0x401fa, lpRect=0x14dcf0 | out: lpRect=0x14dcf0) returned 1 [0068.067] GetWindowRect (in: hWnd=0x401fa, lpRect=0x14dcf0 | out: lpRect=0x14dcf0) returned 1 [0068.067] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0068.067] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0068.067] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0068.067] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x5, wParam=0x0, lParam=0x1d80252) returned 0x0 [0068.067] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x3, wParam=0x0, lParam=0xcd01a7) returned 0x0 [0068.067] GetClientRect (in: hWnd=0x401fa, lpRect=0x14dd80 | out: lpRect=0x14dd80) returned 1 [0068.067] GetWindowRect (in: hWnd=0x401fa, lpRect=0x14dd80 | out: lpRect=0x14dd80) returned 1 [0068.072] InvalidateRect (hWnd=0x1020c, lpRect=0x0, bErase=0) returned 1 [0068.072] GetFocus () returned 0x401fa [0068.072] GetFocus () returned 0x401fa [0068.072] SetFocus (hWnd=0x1020c) returned 0x401fa [0068.073] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x8, wParam=0x1020c, lParam=0x0) returned 0x0 [0068.074] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0068.074] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0068.074] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0068.075] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x7, wParam=0x401fa, lParam=0x0) returned 0x0 [0068.075] GetStockObject (i=5) returned 0x1900015 [0068.075] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0068.075] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0xd, wParam=0x6, lParam=0xa84240) returned 0x5 [0068.075] GetDlgItem (hDlg=0x401fa, nIDDlgItem=66060) returned 0x1020c [0068.075] SendMessageW (hWnd=0x1020c, Msg=0x202b, wParam=0x1020c, lParam=0x14d770) returned 0x0 [0068.075] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x202b, wParam=0x1020c, lParam=0x14d770) returned 0x0 [0068.076] InvalidateRect (hWnd=0x1020c, lpRect=0x0, bErase=0) returned 1 [0068.076] GetFocus () returned 0x1020c [0068.076] IsWindowVisible (hWnd=0x301d2) returned 0 [0068.134] InvalidateRect (hWnd=0x3019e, lpRect=0x0, bErase=1) returned 1 [0068.134] InvalidateRect (hWnd=0x70112, lpRect=0x0, bErase=0) returned 1 [0068.134] InvalidateRect (hWnd=0x301a0, lpRect=0x0, bErase=0) returned 1 [0068.135] InvalidateRect (hWnd=0x301d4, lpRect=0x0, bErase=0) returned 1 [0068.135] InvalidateRect (hWnd=0x20204, lpRect=0x0, bErase=0) returned 1 [0068.135] GetWindowThreadProcessId (in: hWnd=0x301d2, lpdwProcessId=0x14e650 | out: lpdwProcessId=0x14e650) returned 0xa50 [0068.135] GetCurrentThreadId () returned 0xa50 [0068.135] PostMessageW (hWnd=0x301d2, Msg=0xc146, wParam=0x0, lParam=0x0) returned 1 [0068.135] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0068.135] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0068.135] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0068.135] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0068.135] IsWindowUnicode (hWnd=0x401fa) returned 1 [0068.135] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0068.135] TranslateMessage (lpMsg=0x14edb0) returned 0 [0068.135] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0068.143] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0068.143] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.0.app.0.141b42a_r12_ad1", lpWindowName="TimerNativeWindow", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffffffffffd, hMenu=0x0, hInstance=0xcc0000, lpParam=0x0) returned 0x10212 [0068.143] SetWindowLongPtrW (hWnd=0x10212, nIndex=-4, dwNewLong=0x76f7b0ac) returned 0x1aff14ac [0068.143] GetWindowLongPtrW (hWnd=0x10212, nIndex=-4) returned 0x76f7b0ac [0068.143] SetWindowLongPtrW (hWnd=0x10212, nIndex=-4, dwNewLong=0x1b00191c) returned 0x76f7b0ac [0068.143] GetWindowLongPtrW (hWnd=0x10212, nIndex=-4) returned 0x1b00191c [0068.143] GetWindowLongPtrW (hWnd=0x10212, nIndex=-16) returned 0x4c00000 [0068.143] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10212, Msg=0x24, wParam=0x0, lParam=0x14db70) returned 0x0 [0068.143] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10212, Msg=0x81, wParam=0x0, lParam=0x14dae0) returned 0x1 [0068.143] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10212, Msg=0x83, wParam=0x0, lParam=0x14db90) returned 0x0 [0068.143] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10212, Msg=0x1, wParam=0x0, lParam=0x14dab0) returned 0x0 [0068.143] SetTimer (hWnd=0x10212, nIDEvent=0x3, uElapse=0x2710, lpTimerFunc=0x0) returned 0x3 [0068.144] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0068.144] GetMessageA (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0068.144] TranslateMessage (lpMsg=0x14edb0) returned 0 [0068.144] DispatchMessageA (lpMsg=0x14edb0) returned 0x0 [0068.144] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0068.144] IsWindowUnicode (hWnd=0x301d2) returned 1 [0068.144] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0068.144] TranslateMessage (lpMsg=0x14edb0) returned 0 [0068.144] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0068.147] IsWindowVisible (hWnd=0x301d2) returned 0 [0068.147] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0068.147] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x27b02b6) returned 0x1 [0068.147] IsWindowUnicode (hWnd=0x1020c) returned 1 [0068.147] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0068.147] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x27b02b6) returned 0x1 [0068.148] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0068.148] SetCursor (hCursor=0x10003) returned 0x10003 [0068.148] TranslateMessage (lpMsg=0x14edb0) returned 0 [0068.148] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0068.153] _TrackMouseEvent (in: lpEventTrack=0x214a8d0 | out: lpEventTrack=0x214a8d0) returned 1 [0068.153] SendMessageW (hWnd=0x1020c, Msg=0xc12f, wParam=0x0, lParam=0x0) returned 0x0 [0068.154] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0xc12f, wParam=0x0, lParam=0x0) returned 0x0 [0068.199] InvalidateRect (hWnd=0x1020c, lpRect=0x0, bErase=0) returned 1 [0068.200] GetKeyState (nVirtKey=2) returned 0 [0068.200] GetKeyState (nVirtKey=4) returned 0 [0068.200] GetKeyState (nVirtKey=5) returned 0 [0068.200] GetKeyState (nVirtKey=6) returned 0 [0068.200] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0068.200] IsWindowUnicode (hWnd=0x401fa) returned 1 [0068.200] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0068.200] TranslateMessage (lpMsg=0x14edb0) returned 0 [0068.200] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0068.202] BeginPaint (in: hWnd=0x401fa, lpPaint=0x14e4e8 | out: lpPaint=0x14e4e8) returned 0xb010256 [0068.203] GdipCreateHalftonePalette () returned 0x1108086e [0068.204] SelectPalette (hdc=0xb010256, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0068.204] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0068.204] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0068.204] GetSystemMetrics (nIndex=42) returned 0 [0068.204] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14e380, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0068.204] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14e380) returned 0xc [0068.204] SelectPalette (hdc=0xb010256, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0068.204] EndPaint (hWnd=0x401fa, lpPaint=0x14e488) returned 1 [0068.204] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0068.204] IsWindowUnicode (hWnd=0x301fc) returned 1 [0068.204] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0068.204] TranslateMessage (lpMsg=0x14edb0) returned 0 [0068.204] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0068.204] BeginPaint (in: hWnd=0x301fc, lpPaint=0x14e478 | out: lpPaint=0x14e478) returned 0xb010256 [0068.204] SelectPalette (hdc=0xb010256, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0068.205] CreateCompatibleDC (hdc=0xb010256) returned 0x690107c9 [0068.205] GetObjectType (h=0xb010256) returned 0x3 [0068.205] CreateCompatibleBitmap (hdc=0xb010256, cx=1, cy=1) returned 0x29050873 [0068.205] GetDIBits (in: hdc=0xb010256, hbm=0x29050873, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x14de08, usage=0x0 | out: lpvBits=0x0, lpbmi=0x14de08) returned 1 [0068.206] GetDIBits (in: hdc=0xb010256, hbm=0x29050873, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x14de08, usage=0x0 | out: lpvBits=0x0, lpbmi=0x14de08) returned 1 [0068.206] DeleteObject (ho=0x29050873) returned 1 [0068.206] CreateDIBSection (in: hdc=0xb010256, lpbmi=0x14deb8, usage=0x0, ppvBits=0x14e478, hSection=0x0, offset=0x0 | out: ppvBits=0x14e478) returned 0x27050250 [0068.206] SelectObject (hdc=0x690107c9, h=0x27050250) returned 0x185000f [0068.206] GdipCreateFromHDC (hdc=0x690107c9, graphics=0x14e3f8) returned 0x0 [0068.207] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0068.208] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=123, height=23, combineMode=0x0) returned 0x0 [0068.242] GdipCreateMatrix (matrix=0x14e420) returned 0x0 [0068.242] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30970) returned 0x0 [0068.243] GdipIsMatrixIdentity (matrix=0x1ba30970, result=0x14e488) returned 0x0 [0068.244] GdipGetMatrixElements (matrix=0x1ba30970, matrixOut=0xa931f0) returned 0x0 [0068.244] LocalFree (hMem=0xa931f0) returned 0x0 [0068.244] GdipDeleteMatrix (matrix=0x1ba30970) returned 0x0 [0068.246] GdipCreateRegion (region=0x14e420) returned 0x0 [0068.246] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0068.247] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e480) returned 0x0 [0068.247] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e520) returned 0x0 [0068.248] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffdb30dbd) returned 0x0 [0068.248] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0068.255] SystemParametersInfoW (in: uiAction=0x42, uiParam=0x10, pvParam=0x14e288, fWinIni=0x0 | out: pvParam=0x14e288) returned 1 [0068.374] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e198) returned 0x0 [0068.374] GetCurrentObject (hdc=0x690107c9, type=0x1) returned 0x1b00017 [0068.374] GetCurrentObject (hdc=0x690107c9, type=0x2) returned 0x1900010 [0068.374] GetCurrentObject (hdc=0x690107c9, type=0x7) returned 0x27050250 [0068.374] GetCurrentObject (hdc=0x690107c9, type=0x6) returned 0x18a002e [0068.374] SaveDC (hdc=0x690107c9) returned 1 [0068.374] GetNearestColor (hdc=0x690107c9, color=0xa0) returned 0xa0 [0068.374] GetNearestColor (hdc=0x690107c9, color=0x35) returned 0x35 [0068.374] GetNearestColor (hdc=0x690107c9, color=0x0) returned 0x0 [0068.375] GetNearestColor (hdc=0x690107c9, color=0x4848e5) returned 0x4848e5 [0068.375] GetNearestColor (hdc=0x690107c9, color=0x0) returned 0x0 [0068.375] GetNearestColor (hdc=0x690107c9, color=0x5151ff) returned 0x5151ff [0068.375] GetNearestColor (hdc=0x690107c9, color=0x4848e5) returned 0x4848e5 [0068.375] GetNearestColor (hdc=0x690107c9, color=0xc0) returned 0xc0 [0068.375] GetNearestColor (hdc=0x690107c9, color=0x0) returned 0x0 [0068.375] RestoreDC (hdc=0x690107c9, nSavedDC=-1) returned 1 [0068.375] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x690107c9) returned 0x0 [0068.377] IsAppThemed () returned 0x1 [0068.377] GetThemeAppProperties () returned 0x3 [0068.377] GetThemeAppProperties () returned 0x3 [0068.377] OpenThemeData () returned 0x30002 [0068.384] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x14e238, fWinIni=0x0 | out: pvParam=0x14e238) returned 1 [0068.384] SendMessageW (hWnd=0x401fa, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0068.384] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0068.384] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0068.384] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301fc, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0068.384] RedrawWindow (hWnd=0x301fc, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0068.385] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0068.385] RedrawWindow (hWnd=0x201da, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0068.385] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201dc, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0068.385] RedrawWindow (hWnd=0x201dc, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0068.385] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10206, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0068.385] RedrawWindow (hWnd=0x10206, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0068.385] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10208, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0068.385] RedrawWindow (hWnd=0x10208, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0068.385] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020a, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0068.385] RedrawWindow (hWnd=0x1020a, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0068.385] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0068.385] RedrawWindow (hWnd=0x1020c, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0068.385] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020e, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0068.385] RedrawWindow (hWnd=0x1020e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0068.385] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10210, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0068.385] RedrawWindow (hWnd=0x10210, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0068.385] RedrawWindow (hWnd=0x401fa, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0068.385] IsAppThemed () returned 0x1 [0068.385] GetThemeAppProperties () returned 0x3 [0068.385] GetThemeAppProperties () returned 0x3 [0068.386] GdipGetFamilyName (in: family=0x1b47c5e0, name=0x14dbe0, language=0x409 | out: name="Microsoft Sans Serif") returned 0x0 [0068.386] GetDeviceCaps (hdc=0x8010893, index=90) returned 96 [0068.386] CoTaskMemAlloc (cb=0x5c) returned 0xa5ed70 [0068.386] CreateFontIndirectW (lplf=0xa5ed70) returned 0x120a086d [0068.386] CoTaskMemFree (pv=0xa5ed70) [0068.386] GetObjectW (in: h=0x120a086d, c=92, pv=0x14dbf0 | out: pv=0x14dbf0) returned 92 [0068.386] SelectObject (hdc=0x8010893, h=0x120a086d) returned 0xb0a087e [0068.386] GetMapMode (hdc=0x8010893) returned 1 [0068.386] GetTextMetricsW (in: hdc=0x8010893, lptm=0x14dc00 | out: lptm=0x14dc00) returned 1 [0068.386] DrawTextExW (in: hdc=0x8010893, lpchText="Enter Code", cchText=10, lprc=0x14de08, format=0x102415, lpdtp=0x214d330 | out: lpchText="Enter Code", lprc=0x14de08) returned 13 [0068.395] IsAppThemed () returned 0x1 [0068.395] GetThemeAppProperties () returned 0x3 [0068.395] GetThemeAppProperties () returned 0x3 [0068.395] IsAppThemed () returned 0x1 [0068.395] GetThemeAppProperties () returned 0x3 [0068.395] GetThemeAppProperties () returned 0x3 [0068.395] GetFocus () returned 0x1020c [0068.397] IsAppThemed () returned 0x1 [0068.397] GetThemeAppProperties () returned 0x3 [0068.397] GetThemeAppProperties () returned 0x3 [0068.397] IsAppThemed () returned 0x1 [0068.397] GetThemeAppProperties () returned 0x3 [0068.397] GetThemeAppProperties () returned 0x3 [0068.397] IsThemePartDefined () returned 0x1 [0068.397] IsAppThemed () returned 0x1 [0068.397] GetThemeAppProperties () returned 0x3 [0068.397] GetThemeAppProperties () returned 0x3 [0068.397] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0068.499] IsAppThemed () returned 0x1 [0068.499] GetThemeAppProperties () returned 0x3 [0068.499] GetThemeAppProperties () returned 0x3 [0068.499] IsAppThemed () returned 0x1 [0068.499] GetThemeAppProperties () returned 0x3 [0068.499] GetThemeAppProperties () returned 0x3 [0068.499] IsThemePartDefined () returned 0x1 [0068.501] GdipCreateRegion (region=0x14df00) returned 0x0 [0068.501] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0068.501] GdipCreateMatrix (matrix=0x14df00) returned 0x0 [0068.501] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0068.501] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14df68) returned 0x0 [0068.501] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0068.501] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0068.501] LocalFree (hMem=0xa931f0) returned 0x0 [0068.501] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0068.501] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0068.501] LocalFree (hMem=0xa931f0) returned 0x0 [0068.501] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0068.501] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14dfd0) returned 0x0 [0068.501] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df90) returned 0x0 [0068.502] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df90) returned 0x0 [0068.503] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0068.503] GdipGetDC (graphics=0x1afd81d0, hdc=0x14dfd8) returned 0x0 [0068.503] GetCurrentObject (hdc=0x690107c9, type=0x1) returned 0x1b00017 [0068.503] GetCurrentObject (hdc=0x690107c9, type=0x2) returned 0x1900010 [0068.503] GetCurrentObject (hdc=0x690107c9, type=0x7) returned 0x27050250 [0068.503] GetCurrentObject (hdc=0x690107c9, type=0x6) returned 0x18a002e [0068.503] SaveDC (hdc=0x690107c9) returned 1 [0068.505] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x34040879 [0068.505] GetClipRgn (hdc=0x690107c9, hrgn=0x34040879) returned 0 [0068.506] SelectClipRgn (hdc=0x690107c9, hrgn=0x16040864) returned 2 [0068.506] DeleteObject (ho=0x34040879) returned 1 [0068.506] DeleteObject (ho=0x16040864) returned 1 [0068.507] OffsetViewportOrgEx (in: hdc=0x690107c9, x=0, y=0, lppt=0x214dd78 | out: lppt=0x214dd78) returned 1 [0068.507] DrawThemeParentBackground () returned 0x0 [0068.507] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14db88 | out: lpwndpl=0x14db88) returned 1 [0068.507] GetClientRect (in: hWnd=0x401fa, lpRect=0x14daa0 | out: lpRect=0x14daa0) returned 1 [0068.507] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0068.507] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0068.507] GetSystemMetrics (nIndex=42) returned 0 [0068.507] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d800, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0068.507] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d800) returned 0xc [0068.507] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d888 | out: lpRect=0x14d888) returned 1 [0068.507] GetCurrentObject (hdc=0x690107c9, type=0x1) returned 0x1b00017 [0068.507] GetCurrentObject (hdc=0x690107c9, type=0x2) returned 0x1900010 [0068.507] GetCurrentObject (hdc=0x690107c9, type=0x7) returned 0x27050250 [0068.507] GetCurrentObject (hdc=0x690107c9, type=0x6) returned 0x18a002e [0068.507] SaveDC (hdc=0x690107c9) returned 2 [0068.507] GetNearestColor (hdc=0x690107c9, color=0xa0) returned 0xa0 [0068.507] CreateSolidBrush (color=0xa0) returned 0x1f100860 [0068.507] FillRect (hDC=0x690107c9, lprc=0x14d578, hbr=0x1f100860) returned 1 [0068.507] DeleteObject (ho=0x1f100860) returned 1 [0068.508] RestoreDC (hdc=0x690107c9, nSavedDC=-1) returned 1 [0068.508] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0068.508] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0068.508] GetSystemMetrics (nIndex=42) returned 0 [0068.508] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0068.508] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0068.508] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d7b8 | out: lpRect=0x14d7b8) returned 1 [0068.508] GetCurrentObject (hdc=0x690107c9, type=0x1) returned 0x1b00017 [0068.508] GetCurrentObject (hdc=0x690107c9, type=0x2) returned 0x1900010 [0068.508] GetCurrentObject (hdc=0x690107c9, type=0x7) returned 0x27050250 [0068.508] GetCurrentObject (hdc=0x690107c9, type=0x6) returned 0x18a002e [0068.508] SaveDC (hdc=0x690107c9) returned 2 [0068.508] GetNearestColor (hdc=0x690107c9, color=0xa0) returned 0xa0 [0068.508] CreateSolidBrush (color=0xa0) returned 0x20100860 [0068.508] FillRect (hDC=0x690107c9, lprc=0x14d4a8, hbr=0x20100860) returned 1 [0068.508] DeleteObject (ho=0x20100860) returned 1 [0068.508] RestoreDC (hdc=0x690107c9, nSavedDC=-1) returned 1 [0068.508] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0068.508] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0068.508] GetSystemMetrics (nIndex=42) returned 0 [0068.508] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0068.508] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0068.508] RestoreDC (hdc=0x690107c9, nSavedDC=-1) returned 1 [0068.509] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x690107c9) returned 0x0 [0068.509] IsAppThemed () returned 0x1 [0068.509] GetThemeAppProperties () returned 0x3 [0068.509] GetThemeAppProperties () returned 0x3 [0068.509] IsAppThemed () returned 0x1 [0068.509] GetThemeAppProperties () returned 0x3 [0068.509] GetThemeAppProperties () returned 0x3 [0068.509] IsThemePartDefined () returned 0x1 [0068.509] GdipCreateRegion (region=0x14dea0) returned 0x0 [0068.509] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0068.509] GdipCreateMatrix (matrix=0x14dea0) returned 0x0 [0068.510] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30970) returned 0x0 [0068.510] GdipIsMatrixIdentity (matrix=0x1ba30970, result=0x14df08) returned 0x0 [0068.510] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0068.510] GdipGetMatrixElements (matrix=0x1ba30970, matrixOut=0xa931f0) returned 0x0 [0068.510] LocalFree (hMem=0xa931f0) returned 0x0 [0068.510] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0068.510] GdipGetMatrixElements (matrix=0x1ba30970, matrixOut=0xa931f0) returned 0x0 [0068.510] LocalFree (hMem=0xa931f0) returned 0x0 [0068.510] GdipDeleteMatrix (matrix=0x1ba30970) returned 0x0 [0068.510] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df70) returned 0x0 [0068.510] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df30) returned 0x0 [0068.510] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df30) returned 0x0 [0068.510] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0068.510] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df78) returned 0x0 [0068.510] GetCurrentObject (hdc=0x690107c9, type=0x1) returned 0x1b00017 [0068.510] GetCurrentObject (hdc=0x690107c9, type=0x2) returned 0x1900010 [0068.510] GetCurrentObject (hdc=0x690107c9, type=0x7) returned 0x27050250 [0068.510] GetCurrentObject (hdc=0x690107c9, type=0x6) returned 0x18a002e [0068.510] SaveDC (hdc=0x690107c9) returned 1 [0068.510] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x17040864 [0068.510] GetClipRgn (hdc=0x690107c9, hrgn=0x17040864) returned 0 [0068.510] SelectClipRgn (hdc=0x690107c9, hrgn=0x36040879) returned 2 [0068.510] DeleteObject (ho=0x17040864) returned 1 [0068.510] DeleteObject (ho=0x36040879) returned 1 [0068.510] OffsetViewportOrgEx (in: hdc=0x690107c9, x=0, y=0, lppt=0x214eb80 | out: lppt=0x214eb80) returned 1 [0068.510] IsAppThemed () returned 0x1 [0068.511] GetThemeAppProperties () returned 0x3 [0068.511] GetThemeAppProperties () returned 0x3 [0068.511] DrawThemeBackground () returned 0x0 [0068.511] RestoreDC (hdc=0x690107c9, nSavedDC=-1) returned 1 [0068.511] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x690107c9) returned 0x0 [0068.511] GdipCreateRegion (region=0x14de90) returned 0x0 [0068.511] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0068.511] GdipCreateMatrix (matrix=0x14de90) returned 0x0 [0068.511] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0068.511] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14def8) returned 0x0 [0068.511] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0068.511] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0068.511] LocalFree (hMem=0xa931f0) returned 0x0 [0068.511] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0068.511] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0068.511] LocalFree (hMem=0xa931f0) returned 0x0 [0068.511] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0068.511] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df60) returned 0x0 [0068.511] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df20) returned 0x0 [0068.511] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df20) returned 0x0 [0068.511] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0068.512] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df68) returned 0x0 [0068.512] GetCurrentObject (hdc=0x690107c9, type=0x1) returned 0x1b00017 [0068.512] GetCurrentObject (hdc=0x690107c9, type=0x2) returned 0x1900010 [0068.512] GetCurrentObject (hdc=0x690107c9, type=0x7) returned 0x27050250 [0068.512] GetCurrentObject (hdc=0x690107c9, type=0x6) returned 0x18a002e [0068.512] SaveDC (hdc=0x690107c9) returned 1 [0068.512] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x37040879 [0068.512] GetClipRgn (hdc=0x690107c9, hrgn=0x37040879) returned 0 [0068.512] SelectClipRgn (hdc=0x690107c9, hrgn=0x18040864) returned 2 [0068.512] DeleteObject (ho=0x37040879) returned 1 [0068.512] DeleteObject (ho=0x18040864) returned 1 [0068.512] OffsetViewportOrgEx (in: hdc=0x690107c9, x=0, y=0, lppt=0x214f058 | out: lppt=0x214f058) returned 1 [0068.512] IsAppThemed () returned 0x1 [0068.512] GetThemeAppProperties () returned 0x3 [0068.512] GetThemeAppProperties () returned 0x3 [0068.512] GetThemeBackgroundContentRect () returned 0x0 [0068.512] RestoreDC (hdc=0x690107c9, nSavedDC=-1) returned 1 [0068.512] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x690107c9) returned 0x0 [0068.513] IsAppThemed () returned 0x1 [0068.513] GetThemeAppProperties () returned 0x3 [0068.513] GetThemeAppProperties () returned 0x3 [0068.514] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e148) returned 0x0 [0068.514] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e128) returned 0x0 [0068.514] GetCurrentObject (hdc=0x690107c9, type=0x1) returned 0x1b00017 [0068.515] GetCurrentObject (hdc=0x690107c9, type=0x2) returned 0x1900010 [0068.515] GetCurrentObject (hdc=0x690107c9, type=0x7) returned 0x27050250 [0068.515] GetCurrentObject (hdc=0x690107c9, type=0x6) returned 0x18a002e [0068.515] SaveDC (hdc=0x690107c9) returned 1 [0068.517] GetTextAlign (hdc=0x690107c9) returned 0x0 [0068.518] GetTextColor (hdc=0x690107c9) returned 0x0 [0068.518] GetCurrentObject (hdc=0x690107c9, type=0x6) returned 0x18a002e [0068.518] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dc60 | out: pv=0x14dc60) returned 92 [0068.518] SelectObject (hdc=0x690107c9, h=0x120a086d) returned 0x18a002e [0068.519] GetBkMode (hdc=0x690107c9) returned 2 [0068.520] SetBkMode (hdc=0x690107c9, mode=1) returned 2 [0068.520] DrawTextExW (in: hdc=0x690107c9, lpchText="Enter Code", cchText=10, lprc=0x14dea0, format=0x102415, lpdtp=0x214f638 | out: lpchText="Enter Code", lprc=0x14dea0) returned 13 [0068.520] DrawTextExW (in: hdc=0x690107c9, lpchText="Enter Code", cchText=10, lprc=0x14e0b8, format=0x102015, lpdtp=0x214f638 | out: lpchText="Enter Code", lprc=0x14e0b8) returned 13 [0068.521] RestoreDC (hdc=0x690107c9, nSavedDC=-1) returned 1 [0068.521] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x690107c9) returned 0x0 [0068.521] GetFocus () returned 0x1020c [0068.521] IsAppThemed () returned 0x1 [0068.521] GetThemeAppProperties () returned 0x3 [0068.522] GetThemeAppProperties () returned 0x3 [0068.522] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e438) returned 0x0 [0068.522] BitBlt (hdc=0xb010256, x=0, y=0, cx=123, cy=23, hdcSrc=0x690107c9, x1=0, y1=0, rop=0xcc0020) returned 1 [0068.522] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x690107c9) returned 0x0 [0068.522] SelectPalette (hdc=0xb010256, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0068.522] SelectObject (hdc=0x690107c9, h=0x185000f) returned 0x27050250 [0068.522] DeleteDC (hdc=0x690107c9) returned 1 [0068.523] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0068.523] EndPaint (hWnd=0x301fc, lpPaint=0x14e418) returned 1 [0068.523] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0068.523] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x27b02b6) returned 0x1 [0068.523] IsWindowUnicode (hWnd=0x1020c) returned 1 [0068.523] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0068.523] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x27b02b6) returned 0x1 [0068.523] GetDlgItem (hDlg=0x401fa, nIDDlgItem=0) returned 0x0 [0068.523] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x210, wParam=0x201, lParam=0x1ae010f) returned 0x0 [0068.523] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x21, wParam=0x401fa, lParam=0x2010001) returned 0x1 [0068.523] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x21, wParam=0x401fa, lParam=0x2010001) returned 0x1 [0068.523] SetCursor (hCursor=0x10003) returned 0x10003 [0068.523] TranslateMessage (lpMsg=0x14edb0) returned 0 [0068.523] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0068.557] GetKeyState (nVirtKey=1) returned -127 [0068.557] GetKeyState (nVirtKey=2) returned 0 [0068.557] GetKeyState (nVirtKey=4) returned 0 [0068.557] GetKeyState (nVirtKey=5) returned 0 [0068.557] GetKeyState (nVirtKey=6) returned 0 [0068.557] IsWindowVisible (hWnd=0x1020c) returned 1 [0068.557] IsWindowEnabled (hWnd=0x1020c) returned 1 [0068.557] SetFocus (hWnd=0x1020c) returned 0x1020c [0068.557] GetFocus () returned 0x1020c [0068.558] GetFocus () returned 0x1020c [0068.558] GetFocus () returned 0x1020c [0068.558] GetKeyState (nVirtKey=1) returned -127 [0068.558] GetKeyState (nVirtKey=2) returned 0 [0068.558] GetKeyState (nVirtKey=4) returned 0 [0068.558] GetKeyState (nVirtKey=5) returned 0 [0068.558] GetKeyState (nVirtKey=6) returned 0 [0068.605] SetCapture (hWnd=0x1020c) returned 0x0 [0068.605] GetKeyState (nVirtKey=1) returned -127 [0068.605] GetKeyState (nVirtKey=2) returned 0 [0068.605] GetKeyState (nVirtKey=4) returned 0 [0068.605] GetKeyState (nVirtKey=5) returned 0 [0068.605] GetKeyState (nVirtKey=6) returned 0 [0068.605] NotifyWinEvent (event=0x800a, hwnd=0x1020c, idObject=-4, idChild=0) [0068.605] InvalidateRect (hWnd=0x1020c, lpRect=0x14e6f0, bErase=0) returned 1 [0068.605] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0068.605] GetMessageA (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0068.605] TranslateMessage (lpMsg=0x14edb0) returned 0 [0068.605] DispatchMessageA (lpMsg=0x14edb0) returned 0x0 [0068.605] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0068.605] IsWindowUnicode (hWnd=0x1020c) returned 1 [0068.605] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0068.605] TranslateMessage (lpMsg=0x14edb0) returned 0 [0068.605] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0068.606] MapWindowPoints (in: hWndFrom=0x1020c, hWndTo=0x0, lpPoints=0x214f800, cPoints=0x1 | out: lpPoints=0x214f800) returned 41353803 [0068.606] NotifyWinEvent (event=0x800a, hwnd=0x1020c, idObject=-4, idChild=0) [0068.606] InvalidateRect (hWnd=0x1020c, lpRect=0x14e680, bErase=0) returned 1 [0068.606] UpdateWindow (hWnd=0x1020c) returned 1 [0068.606] BeginPaint (in: hWnd=0x1020c, lpPaint=0x14ddf8 | out: lpPaint=0x14ddf8) returned 0x5010830 [0068.606] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0068.606] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x14, wParam=0x5010830, lParam=0x0) returned 0x1 [0068.606] GetStockObject (i=5) returned 0x1900015 [0068.606] SelectPalette (hdc=0x5010830, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0068.606] CreateCompatibleDC (hdc=0x5010830) returned 0x6c0107c9 [0068.606] DeleteObject (ho=0x27050250) returned 1 [0068.606] GetObjectType (h=0x5010830) returned 0x3 [0068.607] CreateCompatibleBitmap (hdc=0x5010830, cx=1, cy=1) returned 0x2b050873 [0068.607] GetDIBits (in: hdc=0x5010830, hbm=0x2b050873, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x14d788, usage=0x0 | out: lpvBits=0x0, lpbmi=0x14d788) returned 1 [0068.607] GetDIBits (in: hdc=0x5010830, hbm=0x2b050873, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x14d788, usage=0x0 | out: lpvBits=0x0, lpbmi=0x14d788) returned 1 [0068.607] DeleteObject (ho=0x2b050873) returned 1 [0068.607] CreateDIBSection (in: hdc=0x5010830, lpbmi=0x14d838, usage=0x0, ppvBits=0x14ddf8, hSection=0x0, offset=0x0 | out: ppvBits=0x14ddf8) returned 0x28050250 [0068.607] SelectObject (hdc=0x6c0107c9, h=0x28050250) returned 0x185000f [0068.607] GdipCreateFromHDC (hdc=0x6c0107c9, graphics=0x14dd78) returned 0x0 [0068.607] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0068.607] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=408, height=23, combineMode=0x0) returned 0x0 [0068.607] GdipCreateMatrix (matrix=0x14dda0) returned 0x0 [0068.607] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30970) returned 0x0 [0068.607] GdipIsMatrixIdentity (matrix=0x1ba30970, result=0x14de08) returned 0x0 [0068.607] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0068.607] GdipGetMatrixElements (matrix=0x1ba30970, matrixOut=0xa931f0) returned 0x0 [0068.607] LocalFree (hMem=0xa931f0) returned 0x0 [0068.607] GdipDeleteMatrix (matrix=0x1ba30970) returned 0x0 [0068.607] GdipCreateRegion (region=0x14dda0) returned 0x0 [0068.607] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0068.608] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14de00) returned 0x0 [0068.608] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14dea0) returned 0x0 [0068.608] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffdb10dbd) returned 0x0 [0068.608] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0068.617] GdipGetDC (graphics=0x1afd81d0, hdc=0x14db18) returned 0x0 [0068.617] GetCurrentObject (hdc=0x6c0107c9, type=0x1) returned 0x1b00017 [0068.617] GetCurrentObject (hdc=0x6c0107c9, type=0x2) returned 0x1900010 [0068.617] GetCurrentObject (hdc=0x6c0107c9, type=0x7) returned 0x28050250 [0068.617] GetCurrentObject (hdc=0x6c0107c9, type=0x6) returned 0x18a002e [0068.617] SaveDC (hdc=0x6c0107c9) returned 1 [0068.617] GetNearestColor (hdc=0x6c0107c9, color=0xa0) returned 0xa0 [0068.617] GetNearestColor (hdc=0x6c0107c9, color=0x35) returned 0x35 [0068.617] GetNearestColor (hdc=0x6c0107c9, color=0x0) returned 0x0 [0068.617] GetNearestColor (hdc=0x6c0107c9, color=0x4848e5) returned 0x4848e5 [0068.617] GetNearestColor (hdc=0x6c0107c9, color=0x0) returned 0x0 [0068.617] GetNearestColor (hdc=0x6c0107c9, color=0x5151ff) returned 0x5151ff [0068.617] GetNearestColor (hdc=0x6c0107c9, color=0x4848e5) returned 0x4848e5 [0068.617] GetNearestColor (hdc=0x6c0107c9, color=0xc0) returned 0xc0 [0068.617] GetNearestColor (hdc=0x6c0107c9, color=0x0) returned 0x0 [0068.617] RestoreDC (hdc=0x6c0107c9, nSavedDC=-1) returned 1 [0068.617] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x6c0107c9) returned 0x0 [0068.617] IsAppThemed () returned 0x1 [0068.617] GetThemeAppProperties () returned 0x3 [0068.617] GetThemeAppProperties () returned 0x3 [0068.617] IsAppThemed () returned 0x1 [0068.617] GetThemeAppProperties () returned 0x3 [0068.618] GetThemeAppProperties () returned 0x3 [0068.618] DrawTextExW (in: hdc=0x8010893, lpchText="Check", cchText=5, lprc=0x14d788, format=0x102415, lpdtp=0x2151378 | out: lpchText="Check", lprc=0x14d788) returned 13 [0068.618] IsAppThemed () returned 0x1 [0068.618] GetThemeAppProperties () returned 0x3 [0068.618] GetThemeAppProperties () returned 0x3 [0068.618] IsAppThemed () returned 0x1 [0068.618] GetThemeAppProperties () returned 0x3 [0068.618] GetThemeAppProperties () returned 0x3 [0068.667] IsAppThemed () returned 0x1 [0068.667] GetThemeAppProperties () returned 0x3 [0068.667] GetThemeAppProperties () returned 0x3 [0068.667] IsAppThemed () returned 0x1 [0068.667] GetThemeAppProperties () returned 0x3 [0068.667] GetThemeAppProperties () returned 0x3 [0068.667] IsThemePartDefined () returned 0x1 [0068.667] IsAppThemed () returned 0x1 [0068.667] GetThemeAppProperties () returned 0x3 [0068.667] GetThemeAppProperties () returned 0x3 [0068.667] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0068.667] IsAppThemed () returned 0x1 [0068.667] GetThemeAppProperties () returned 0x3 [0068.667] GetThemeAppProperties () returned 0x3 [0068.667] IsAppThemed () returned 0x1 [0068.667] GetThemeAppProperties () returned 0x3 [0068.667] GetThemeAppProperties () returned 0x3 [0068.667] IsThemePartDefined () returned 0x1 [0068.667] GdipCreateRegion (region=0x14d880) returned 0x0 [0068.667] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0068.667] GdipCreateMatrix (matrix=0x14d880) returned 0x0 [0068.668] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0068.668] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14d8e8) returned 0x0 [0068.668] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0068.668] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0068.668] LocalFree (hMem=0xa931f0) returned 0x0 [0068.668] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0068.668] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0068.668] LocalFree (hMem=0xa931f0) returned 0x0 [0068.668] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0068.668] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d950) returned 0x0 [0068.668] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d910) returned 0x0 [0068.668] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14d910) returned 0x0 [0068.668] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0068.668] GdipGetDC (graphics=0x1afd81d0, hdc=0x14d958) returned 0x0 [0068.668] GetCurrentObject (hdc=0x6c0107c9, type=0x1) returned 0x1b00017 [0068.668] GetCurrentObject (hdc=0x6c0107c9, type=0x2) returned 0x1900010 [0068.668] GetCurrentObject (hdc=0x6c0107c9, type=0x7) returned 0x28050250 [0068.668] GetCurrentObject (hdc=0x6c0107c9, type=0x6) returned 0x18a002e [0068.668] SaveDC (hdc=0x6c0107c9) returned 1 [0068.668] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x19040864 [0068.668] GetClipRgn (hdc=0x6c0107c9, hrgn=0x19040864) returned 0 [0068.669] SelectClipRgn (hdc=0x6c0107c9, hrgn=0x3b040879) returned 2 [0068.669] DeleteObject (ho=0x19040864) returned 1 [0068.669] DeleteObject (ho=0x3b040879) returned 1 [0068.669] OffsetViewportOrgEx (in: hdc=0x6c0107c9, x=0, y=0, lppt=0x2151d60 | out: lppt=0x2151d60) returned 1 [0068.669] DrawThemeParentBackground () returned 0x0 [0068.669] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14d508 | out: lpwndpl=0x14d508) returned 1 [0068.669] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d420 | out: lpRect=0x14d420) returned 1 [0068.669] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0068.669] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0068.669] GetSystemMetrics (nIndex=42) returned 0 [0068.669] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d180, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0068.669] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d180) returned 0xc [0068.669] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d208 | out: lpRect=0x14d208) returned 1 [0068.669] GetCurrentObject (hdc=0x6c0107c9, type=0x1) returned 0x1b00017 [0068.669] GetCurrentObject (hdc=0x6c0107c9, type=0x2) returned 0x1900010 [0068.669] GetCurrentObject (hdc=0x6c0107c9, type=0x7) returned 0x28050250 [0068.669] GetCurrentObject (hdc=0x6c0107c9, type=0x6) returned 0x18a002e [0068.669] SaveDC (hdc=0x6c0107c9) returned 2 [0068.669] GetNearestColor (hdc=0x6c0107c9, color=0xa0) returned 0xa0 [0068.669] CreateSolidBrush (color=0xa0) returned 0x21100860 [0068.670] FillRect (hDC=0x6c0107c9, lprc=0x14cef8, hbr=0x21100860) returned 1 [0068.670] DeleteObject (ho=0x21100860) returned 1 [0068.670] RestoreDC (hdc=0x6c0107c9, nSavedDC=-1) returned 1 [0068.670] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0068.670] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0068.670] GetSystemMetrics (nIndex=42) returned 0 [0068.670] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d0b0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0068.670] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d0b0) returned 0xc [0068.670] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d138 | out: lpRect=0x14d138) returned 1 [0068.670] GetCurrentObject (hdc=0x6c0107c9, type=0x1) returned 0x1b00017 [0068.670] GetCurrentObject (hdc=0x6c0107c9, type=0x2) returned 0x1900010 [0068.670] GetCurrentObject (hdc=0x6c0107c9, type=0x7) returned 0x28050250 [0068.670] GetCurrentObject (hdc=0x6c0107c9, type=0x6) returned 0x18a002e [0068.671] SaveDC (hdc=0x6c0107c9) returned 2 [0068.671] GetNearestColor (hdc=0x6c0107c9, color=0xa0) returned 0xa0 [0068.671] CreateSolidBrush (color=0xa0) returned 0x22100860 [0068.671] FillRect (hDC=0x6c0107c9, lprc=0x14ce28, hbr=0x22100860) returned 1 [0068.671] DeleteObject (ho=0x22100860) returned 1 [0068.671] RestoreDC (hdc=0x6c0107c9, nSavedDC=-1) returned 1 [0068.671] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0068.671] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0068.671] GetSystemMetrics (nIndex=42) returned 0 [0068.671] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d0b0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0068.671] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d0b0) returned 0xc [0068.671] RestoreDC (hdc=0x6c0107c9, nSavedDC=-1) returned 1 [0068.671] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x6c0107c9) returned 0x0 [0068.671] IsAppThemed () returned 0x1 [0068.671] GetThemeAppProperties () returned 0x3 [0068.671] GetThemeAppProperties () returned 0x3 [0068.671] IsAppThemed () returned 0x1 [0068.671] GetThemeAppProperties () returned 0x3 [0068.671] GetThemeAppProperties () returned 0x3 [0068.671] IsThemePartDefined () returned 0x1 [0068.671] GdipCreateRegion (region=0x14d820) returned 0x0 [0068.671] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0068.671] GdipCreateMatrix (matrix=0x14d820) returned 0x0 [0068.672] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30970) returned 0x0 [0068.672] GdipIsMatrixIdentity (matrix=0x1ba30970, result=0x14d888) returned 0x0 [0068.672] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0068.672] GdipGetMatrixElements (matrix=0x1ba30970, matrixOut=0xa931f0) returned 0x0 [0068.672] LocalFree (hMem=0xa931f0) returned 0x0 [0068.672] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0068.672] GdipGetMatrixElements (matrix=0x1ba30970, matrixOut=0xa931f0) returned 0x0 [0068.672] LocalFree (hMem=0xa931f0) returned 0x0 [0068.672] GdipDeleteMatrix (matrix=0x1ba30970) returned 0x0 [0068.672] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d8f0) returned 0x0 [0068.672] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d8b0) returned 0x0 [0068.672] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14d8b0) returned 0x0 [0068.672] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0068.672] GdipGetDC (graphics=0x1afd81d0, hdc=0x14d8f8) returned 0x0 [0068.672] GetCurrentObject (hdc=0x6c0107c9, type=0x1) returned 0x1b00017 [0068.672] GetCurrentObject (hdc=0x6c0107c9, type=0x2) returned 0x1900010 [0068.672] GetCurrentObject (hdc=0x6c0107c9, type=0x7) returned 0x28050250 [0068.672] GetCurrentObject (hdc=0x6c0107c9, type=0x6) returned 0x18a002e [0068.672] SaveDC (hdc=0x6c0107c9) returned 1 [0068.672] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3c040879 [0068.672] GetClipRgn (hdc=0x6c0107c9, hrgn=0x3c040879) returned 0 [0068.672] SelectClipRgn (hdc=0x6c0107c9, hrgn=0x1b040864) returned 2 [0068.673] DeleteObject (ho=0x3c040879) returned 1 [0068.673] DeleteObject (ho=0x1b040864) returned 1 [0068.673] OffsetViewportOrgEx (in: hdc=0x6c0107c9, x=0, y=0, lppt=0x2152b68 | out: lppt=0x2152b68) returned 1 [0068.673] IsAppThemed () returned 0x1 [0068.673] GetThemeAppProperties () returned 0x3 [0068.673] GetThemeAppProperties () returned 0x3 [0068.673] DrawThemeBackground () returned 0x0 [0068.673] RestoreDC (hdc=0x6c0107c9, nSavedDC=-1) returned 1 [0068.673] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x6c0107c9) returned 0x0 [0068.673] GdipCreateRegion (region=0x14d810) returned 0x0 [0068.673] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0068.673] GdipCreateMatrix (matrix=0x14d810) returned 0x0 [0068.673] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0068.673] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14d878) returned 0x0 [0068.673] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0068.673] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0068.673] LocalFree (hMem=0xa931f0) returned 0x0 [0068.673] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0068.673] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0068.673] LocalFree (hMem=0xa931f0) returned 0x0 [0068.673] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0068.673] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d8e0) returned 0x0 [0068.674] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d8a0) returned 0x0 [0068.674] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14d8a0) returned 0x0 [0068.674] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0068.674] GdipGetDC (graphics=0x1afd81d0, hdc=0x14d8e8) returned 0x0 [0068.674] GetCurrentObject (hdc=0x6c0107c9, type=0x1) returned 0x1b00017 [0068.674] GetCurrentObject (hdc=0x6c0107c9, type=0x2) returned 0x1900010 [0068.674] GetCurrentObject (hdc=0x6c0107c9, type=0x7) returned 0x28050250 [0068.674] GetCurrentObject (hdc=0x6c0107c9, type=0x6) returned 0x18a002e [0068.674] SaveDC (hdc=0x6c0107c9) returned 1 [0068.674] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1c040864 [0068.674] GetClipRgn (hdc=0x6c0107c9, hrgn=0x1c040864) returned 0 [0068.674] SelectClipRgn (hdc=0x6c0107c9, hrgn=0x3d040879) returned 2 [0068.674] DeleteObject (ho=0x1c040864) returned 1 [0068.674] DeleteObject (ho=0x3d040879) returned 1 [0068.674] OffsetViewportOrgEx (in: hdc=0x6c0107c9, x=0, y=0, lppt=0x2153040 | out: lppt=0x2153040) returned 1 [0068.674] IsAppThemed () returned 0x1 [0068.674] GetThemeAppProperties () returned 0x3 [0068.674] GetThemeAppProperties () returned 0x3 [0068.674] GetThemeBackgroundContentRect () returned 0x0 [0068.674] RestoreDC (hdc=0x6c0107c9, nSavedDC=-1) returned 1 [0068.674] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x6c0107c9) returned 0x0 [0068.674] IsAppThemed () returned 0x1 [0068.674] GetThemeAppProperties () returned 0x3 [0068.675] GetThemeAppProperties () returned 0x3 [0068.675] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14dac8) returned 0x0 [0068.675] GdipGetDC (graphics=0x1afd81d0, hdc=0x14daa8) returned 0x0 [0068.675] GetCurrentObject (hdc=0x6c0107c9, type=0x1) returned 0x1b00017 [0068.675] GetCurrentObject (hdc=0x6c0107c9, type=0x2) returned 0x1900010 [0068.675] GetCurrentObject (hdc=0x6c0107c9, type=0x7) returned 0x28050250 [0068.675] GetCurrentObject (hdc=0x6c0107c9, type=0x6) returned 0x18a002e [0068.675] SaveDC (hdc=0x6c0107c9) returned 1 [0068.675] GetTextAlign (hdc=0x6c0107c9) returned 0x0 [0068.675] GetTextColor (hdc=0x6c0107c9) returned 0x0 [0068.675] GetCurrentObject (hdc=0x6c0107c9, type=0x6) returned 0x18a002e [0068.675] GetObjectW (in: h=0x18a002e, c=92, pv=0x14d5e0 | out: pv=0x14d5e0) returned 92 [0068.675] SelectObject (hdc=0x6c0107c9, h=0x120a086d) returned 0x18a002e [0068.675] GetBkMode (hdc=0x6c0107c9) returned 2 [0068.675] SetBkMode (hdc=0x6c0107c9, mode=1) returned 2 [0068.675] DrawTextExW (in: hdc=0x6c0107c9, lpchText="Check", cchText=5, lprc=0x14d820, format=0x102415, lpdtp=0x2153620 | out: lpchText="Check", lprc=0x14d820) returned 13 [0068.675] DrawTextExW (in: hdc=0x6c0107c9, lpchText="Check", cchText=5, lprc=0x14da38, format=0x102015, lpdtp=0x2153620 | out: lpchText="Check", lprc=0x14da38) returned 13 [0068.676] RestoreDC (hdc=0x6c0107c9, nSavedDC=-1) returned 1 [0068.676] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x6c0107c9) returned 0x0 [0068.676] GetFocus () returned 0x1020c [0068.676] IsAppThemed () returned 0x1 [0068.676] GetThemeAppProperties () returned 0x3 [0068.676] GetThemeAppProperties () returned 0x3 [0068.676] GdipGetDC (graphics=0x1afd81d0, hdc=0x14ddb8) returned 0x0 [0068.676] BitBlt (hdc=0x5010830, x=0, y=0, cx=408, cy=23, hdcSrc=0x6c0107c9, x1=0, y1=0, rop=0xcc0020) returned 1 [0068.676] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x6c0107c9) returned 0x0 [0068.676] SelectPalette (hdc=0x5010830, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0068.676] SelectObject (hdc=0x6c0107c9, h=0x185000f) returned 0x28050250 [0068.676] DeleteDC (hdc=0x6c0107c9) returned 1 [0068.676] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0068.676] EndPaint (hWnd=0x1020c, lpPaint=0x14dd98) returned 1 [0068.676] MapWindowPoints (in: hWndFrom=0x1020c, hWndTo=0x0, lpPoints=0x2153788, cPoints=0x1 | out: lpPoints=0x2153788) returned 41353803 [0068.677] WindowFromPoint (Point=0x27b000002b6) returned 0x1020c [0068.677] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x27b02b6) returned 0x1 [0068.679] NotifyWinEvent (event=0x800a, hwnd=0x1020c, idObject=-4, idChild=0) [0068.679] NotifyWinEvent (event=0x800c, hwnd=0x1020c, idObject=-4, idChild=0) [0068.978] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0068.978] AdjustWindowRectEx (in: lpRect=0x14dc40, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x14dc40) returned 1 [0069.055] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.055] AdjustWindowRectEx (in: lpRect=0x14d920, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d920) returned 1 [0069.157] GetDC (hWnd=0x0) returned 0xb010256 [0069.157] GdipCreateFromHDC (hdc=0xb010256, graphics=0x14d678) returned 0x0 [0069.157] GdipGetFontHeight (font=0x1afa3a40, graphics=0x1afd8140, height=0x14d674) returned 0x0 [0069.157] GdipDeleteGraphics (graphics=0x1afd8140) returned 0x0 [0069.157] ReleaseDC (hWnd=0x0, hDC=0xb010256) returned 1 [0069.157] GetSystemMetrics (nIndex=5) returned 1 [0069.157] GetSystemMetrics (nIndex=6) returned 1 [0069.157] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.157] AdjustWindowRectEx (in: lpRect=0x14d920, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d920) returned 1 [0069.166] GetDC (hWnd=0x0) returned 0xb010256 [0069.166] GdipCreateFromHDC (hdc=0xb010256, graphics=0x14d678) returned 0x0 [0069.166] GdipGetFontHeight (font=0x1afa3a40, graphics=0x1afd8140, height=0x14d674) returned 0x0 [0069.166] GdipDeleteGraphics (graphics=0x1afd8140) returned 0x0 [0069.166] ReleaseDC (hWnd=0x0, hDC=0xb010256) returned 1 [0069.166] GetSystemMetrics (nIndex=5) returned 1 [0069.166] GetSystemMetrics (nIndex=6) returned 1 [0069.166] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.166] AdjustWindowRectEx (in: lpRect=0x14d920, dwStyle=0x560101c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d920) returned 1 [0069.175] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.175] AdjustWindowRectEx (in: lpRect=0x14d920, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d920) returned 1 [0069.185] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.185] AdjustWindowRectEx (in: lpRect=0x14d900, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d900) returned 1 [0069.200] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.200] AdjustWindowRectEx (in: lpRect=0x14d900, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d900) returned 1 [0069.220] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.220] AdjustWindowRectEx (in: lpRect=0x14d7b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d7b8) returned 1 [0069.220] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.220] AdjustWindowRectEx (in: lpRect=0x14d7b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d7b8) returned 1 [0069.223] GetSystemMetrics (nIndex=5) returned 1 [0069.223] GetSystemMetrics (nIndex=6) returned 1 [0069.224] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.224] AdjustWindowRectEx (in: lpRect=0x14d828, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d828) returned 1 [0069.224] GetSystemMetrics (nIndex=5) returned 1 [0069.224] GetSystemMetrics (nIndex=6) returned 1 [0069.224] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.224] AdjustWindowRectEx (in: lpRect=0x14d828, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d828) returned 1 [0069.228] GetSystemMetrics (nIndex=5) returned 1 [0069.228] GetSystemMetrics (nIndex=6) returned 1 [0069.228] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.229] AdjustWindowRectEx (in: lpRect=0x14d828, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d828) returned 1 [0069.229] GetSystemMetrics (nIndex=5) returned 1 [0069.229] GetSystemMetrics (nIndex=6) returned 1 [0069.229] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.229] AdjustWindowRectEx (in: lpRect=0x14d828, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d828) returned 1 [0069.231] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.231] AdjustWindowRectEx (in: lpRect=0x14d7b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d7b8) returned 1 [0069.231] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.231] AdjustWindowRectEx (in: lpRect=0x14d7b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d7b8) returned 1 [0069.234] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x14d8d0) returned 0x0 [0069.234] GdipCreateFont (fontFamily=0x1b47c5e0, emSize=0x7feeffbcd25, style=1, unit=0x3, font=0x2155ec8) returned 0x0 [0069.234] GdipGetFontSize (font=0x1ba30970, size=0x2155ed0) returned 0x0 [0069.234] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.234] AdjustWindowRectEx (in: lpRect=0x14d828, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d828) returned 1 [0069.235] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.235] AdjustWindowRectEx (in: lpRect=0x14d828, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d828) returned 1 [0069.238] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x14d8d0) returned 0x0 [0069.239] GdipCreateFont (fontFamily=0x1b47c5e0, emSize=0x7feeffbcd25, style=1, unit=0x3, font=0x2156218) returned 0x0 [0069.239] GdipGetFontSize (font=0x1ba309f0, size=0x2156220) returned 0x0 [0069.239] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.239] AdjustWindowRectEx (in: lpRect=0x14d828, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d828) returned 1 [0069.239] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.239] AdjustWindowRectEx (in: lpRect=0x14d828, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d828) returned 1 [0069.239] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.239] AdjustWindowRectEx (in: lpRect=0x14d888, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x14d888) returned 1 [0069.239] GetSystemMetrics (nIndex=59) returned 1460 [0069.239] GetSystemMetrics (nIndex=60) returned 920 [0069.239] GetSystemMetrics (nIndex=34) returned 132 [0069.239] GetSystemMetrics (nIndex=35) returned 38 [0069.240] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.240] AdjustWindowRectEx (in: lpRect=0x14d648, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x14d648) returned 1 [0069.240] GetCurrentThreadId () returned 0xa50 [0069.240] GetCurrentThreadId () returned 0xa50 [0069.240] GetCurrentThreadId () returned 0xa50 [0069.240] GetCurrentThreadId () returned 0xa50 [0069.240] GetCurrentThreadId () returned 0xa50 [0069.240] GetCurrentThreadId () returned 0xa50 [0069.240] GetCurrentThreadId () returned 0xa50 [0069.240] GetCurrentThreadId () returned 0xa50 [0069.240] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.240] AdjustWindowRectEx (in: lpRect=0x14d598, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d598) returned 1 [0069.240] SelectObject (hdc=0x8010893, h=0xb0a087e) returned 0x120a086d [0069.240] DrawTextExW (in: hdc=0x8010893, lpchText="Code:", cchText=5, lprc=0x14d508, format=0x2400, lpdtp=0x21568f0 | out: lpchText="Code:", lprc=0x14d508) returned 13 [0069.241] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.241] AdjustWindowRectEx (in: lpRect=0x14d608, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d608) returned 1 [0069.241] GetCurrentThreadId () returned 0xa50 [0069.241] GetCurrentThreadId () returned 0xa50 [0069.241] GetCurrentThreadId () returned 0xa50 [0069.241] GetCurrentThreadId () returned 0xa50 [0069.241] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.241] AdjustWindowRectEx (in: lpRect=0x14d598, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d598) returned 1 [0069.241] DrawTextExW (in: hdc=0x8010893, lpchText="E-Mail Address:", cchText=15, lprc=0x14d508, format=0x2400, lpdtp=0x2156bd8 | out: lpchText="E-Mail Address:", lprc=0x14d508) returned 13 [0069.241] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.241] AdjustWindowRectEx (in: lpRect=0x14d608, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d608) returned 1 [0069.243] GdipCreateFontFamilyFromName (name="Times New Roman", fontCollection=0x0, fontFamily=0x14d8e0) returned 0x0 [0069.243] GdipCreateFont (fontFamily=0x1af09a70, emSize=0x7feeffbcd25, style=0, unit=0x3, font=0x2156dd8) returned 0x0 [0069.243] GdipGetFontSize (font=0x1ba30a30, size=0x2156de0) returned 0x0 [0069.243] CreateCompatibleDC (hdc=0x0) returned 0xffffffffdf0107c9 [0069.244] GetDC (hWnd=0x0) returned 0xb010256 [0069.244] GdipCreateFromHDC (hdc=0xb010256, graphics=0x14d528) returned 0x0 [0069.244] CoTaskMemAlloc (cb=0x5c) returned 0xa5ed70 [0069.244] GdipGetLogFontW (font=0x1ba30a30, graphics=0x1afd8140, logfontW=0xa5ed70) returned 0x0 [0069.244] CoTaskMemFree (pv=0xa5ed70) [0069.244] CoTaskMemAlloc (cb=0x5c) returned 0xa5ed70 [0069.244] CoTaskMemFree (pv=0xa5ed70) [0069.244] CoTaskMemAlloc (cb=0x5c) returned 0xa5ed70 [0069.244] CoTaskMemFree (pv=0xa5ed70) [0069.244] GdipDeleteGraphics (graphics=0x1afd8140) returned 0x0 [0069.244] ReleaseDC (hWnd=0x0, hDC=0xb010256) returned 1 [0069.245] CoTaskMemAlloc (cb=0x5c) returned 0xa5ed70 [0069.245] CreateFontIndirectW (lplf=0xa5ed70) returned 0xffffffff8b0a086c [0069.245] CoTaskMemFree (pv=0xa5ed70) [0069.245] SelectObject (hdc=0xffffffffdf0107c9, h=0xffffffff8b0a086c) returned 0x18a002e [0069.245] GetTextMetricsW (in: hdc=0xffffffffdf0107c9, lptm=0x14d768 | out: lptm=0x14d768) returned 1 [0069.245] GetTextExtentPoint32W (in: hdc=0xffffffffdf0107c9, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x21577c0 | out: psizl=0x21577c0) returned 1 [0069.246] SelectObject (hdc=0xffffffffdf0107c9, h=0x18a002e) returned 0xffffffff8b0a086c [0069.246] DeleteDC (hdc=0xffffffffdf0107c9) returned 1 [0069.246] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.246] AdjustWindowRectEx (in: lpRect=0x14d650, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d650) returned 1 [0069.246] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.246] AdjustWindowRectEx (in: lpRect=0x14d4a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d4a0) returned 1 [0069.246] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.246] AdjustWindowRectEx (in: lpRect=0x14d650, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d650) returned 1 [0069.246] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.246] AdjustWindowRectEx (in: lpRect=0x14d4a0, dwStyle=0x5601000b, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d4a0) returned 1 [0069.247] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.247] AdjustWindowRectEx (in: lpRect=0x14d650, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d650) returned 1 [0069.247] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.247] AdjustWindowRectEx (in: lpRect=0x14d4a0, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d4a0) returned 1 [0069.247] GetSystemMetrics (nIndex=5) returned 1 [0069.247] GetSystemMetrics (nIndex=6) returned 1 [0069.247] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.247] AdjustWindowRectEx (in: lpRect=0x14d650, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d650) returned 1 [0069.248] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.248] AdjustWindowRectEx (in: lpRect=0x14d4a0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d4a0) returned 1 [0069.248] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.248] AdjustWindowRectEx (in: lpRect=0x14d248, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d248) returned 1 [0069.248] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.248] AdjustWindowRectEx (in: lpRect=0x14d650, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d650) returned 1 [0069.248] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.248] AdjustWindowRectEx (in: lpRect=0x14d4a0, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d4a0) returned 1 [0069.248] GetSystemMetrics (nIndex=5) returned 1 [0069.248] GetSystemMetrics (nIndex=6) returned 1 [0069.248] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.249] AdjustWindowRectEx (in: lpRect=0x14d650, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d650) returned 1 [0069.249] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.249] AdjustWindowRectEx (in: lpRect=0x14d4a0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d4a0) returned 1 [0069.249] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.249] AdjustWindowRectEx (in: lpRect=0x14d248, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d248) returned 1 [0069.348] DeleteObject (ho=0xffffffff8b0a086c) returned 1 [0069.349] GetDC (hWnd=0x0) returned 0xb010256 [0069.349] GdipCreateFromHDC (hdc=0xb010256, graphics=0x14d5d8) returned 0x0 [0069.349] GdipGetFontHeight (font=0x1ba30a30, graphics=0x1afd8140, height=0x14d5d4) returned 0x0 [0069.349] GdipDeleteGraphics (graphics=0x1afd8140) returned 0x0 [0069.349] ReleaseDC (hWnd=0x0, hDC=0xb010256) returned 1 [0069.349] GetSystemMetrics (nIndex=5) returned 1 [0069.349] GetSystemMetrics (nIndex=6) returned 1 [0069.349] GetSystemMetrics (nIndex=5) returned 1 [0069.349] GetSystemMetrics (nIndex=6) returned 1 [0069.349] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.349] AdjustWindowRectEx (in: lpRect=0x14d688, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d688) returned 1 [0069.350] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.350] AdjustWindowRectEx (in: lpRect=0x14d568, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d568) returned 1 [0069.350] GdipGetFamilyName (in: family=0x1af09a70, name=0x14d2b0, language=0x409 | out: name="Times New Roman") returned 0x0 [0069.350] GetDeviceCaps (hdc=0x8010893, index=90) returned 96 [0069.350] CoTaskMemAlloc (cb=0x5c) returned 0xa5ed70 [0069.350] CreateFontIndirectW (lplf=0xa5ed70) returned 0xffffffff8c0a086c [0069.350] CoTaskMemFree (pv=0xa5ed70) [0069.350] GetObjectW (in: h=0xffffffff8c0a086c, c=92, pv=0x14d2c0 | out: pv=0x14d2c0) returned 92 [0069.350] SelectObject (hdc=0x8010893, h=0xffffffff8c0a086c) returned 0xb0a087e [0069.350] GetMapMode (hdc=0x8010893) returned 1 [0069.350] GetTextMetricsW (in: hdc=0x8010893, lptm=0x14d2d0 | out: lptm=0x14d2d0) returned 1 [0069.350] DrawTextExW (in: hdc=0x8010893, lpchText="Code:", cchText=5, lprc=0x14d4d8, format=0x2400, lpdtp=0x2157f68 | out: lpchText="Code:", lprc=0x14d4d8) returned 15 [0069.351] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.351] AdjustWindowRectEx (in: lpRect=0x14d5d8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d5d8) returned 1 [0069.351] GetSystemMetrics (nIndex=5) returned 1 [0069.351] GetSystemMetrics (nIndex=6) returned 1 [0069.351] GetSystemMetrics (nIndex=5) returned 1 [0069.351] GetSystemMetrics (nIndex=6) returned 1 [0069.351] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.351] AdjustWindowRectEx (in: lpRect=0x14d688, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d688) returned 1 [0069.351] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.351] AdjustWindowRectEx (in: lpRect=0x14d568, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d568) returned 1 [0069.351] DrawTextExW (in: hdc=0x8010893, lpchText="E-Mail Address:", cchText=15, lprc=0x14d4d8, format=0x2400, lpdtp=0x21581d0 | out: lpchText="E-Mail Address:", lprc=0x14d4d8) returned 15 [0069.352] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.352] AdjustWindowRectEx (in: lpRect=0x14d5d8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d5d8) returned 1 [0069.352] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.352] AdjustWindowRectEx (in: lpRect=0x14d690, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x14d690) returned 1 [0069.352] AdjustWindowRectEx (in: lpRect=0x14d808, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x14d808) returned 1 [0069.352] GetSystemMetrics (nIndex=59) returned 1460 [0069.352] GetSystemMetrics (nIndex=60) returned 920 [0069.352] GetSystemMetrics (nIndex=34) returned 132 [0069.352] GetSystemMetrics (nIndex=35) returned 38 [0069.352] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.352] AdjustWindowRectEx (in: lpRect=0x14d440, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x14d440) returned 1 [0069.352] AdjustWindowRectEx (in: lpRect=0x14d5c8, dwStyle=0x2cb0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x14d5c8) returned 1 [0069.352] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.353] AdjustWindowRectEx (in: lpRect=0x14d3c0, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x14d3c0) returned 1 [0069.353] GetCursorPos (in: lpPoint=0x2158470 | out: lpPoint=0x2158470*(x=694, y=635)) returned 1 [0069.353] MonitorFromPoint (pt=0x27b000002b6, dwFlags=0x2) returned 0x10001 [0069.353] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x14d170 | out: lpmi=0x14d170) returned 1 [0069.353] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x1901088c [0069.353] GetDeviceCaps (hdc=0x1901088c, index=12) returned 32 [0069.353] GetDeviceCaps (hdc=0x1901088c, index=14) returned 1 [0069.353] DeleteDC (hdc=0x1901088c) returned 1 [0069.353] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x14d240 | out: lpmi=0x14d240) returned 1 [0069.353] AdjustWindowRectEx (in: lpRect=0x14d640, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x14d640) returned 1 [0069.353] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.353] AdjustWindowRectEx (in: lpRect=0x14d2b0, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x14d2b0) returned 1 [0069.353] GetCursorPos (in: lpPoint=0x21587a0 | out: lpPoint=0x21587a0*(x=694, y=635)) returned 1 [0069.353] MonitorFromPoint (pt=0x27b000002b6, dwFlags=0x2) returned 0x10001 [0069.353] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x14d060 | out: lpmi=0x14d060) returned 1 [0069.353] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x1a01088c [0069.354] GetDeviceCaps (hdc=0x1a01088c, index=12) returned 32 [0069.354] GetDeviceCaps (hdc=0x1a01088c, index=14) returned 1 [0069.354] DeleteDC (hdc=0x1a01088c) returned 1 [0069.354] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x14d130 | out: lpmi=0x14d130) returned 1 [0069.354] AdjustWindowRectEx (in: lpRect=0x14d430, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x14d430) returned 1 [0069.354] GetSystemMetrics (nIndex=34) returned 132 [0069.354] GetSystemMetrics (nIndex=35) returned 38 [0069.354] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.354] AdjustWindowRectEx (in: lpRect=0x14d650, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d650) returned 1 [0069.354] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.354] AdjustWindowRectEx (in: lpRect=0x14d4a0, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d4a0) returned 1 [0069.354] GetSystemMetrics (nIndex=5) returned 1 [0069.354] GetSystemMetrics (nIndex=6) returned 1 [0069.354] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.354] AdjustWindowRectEx (in: lpRect=0x14d650, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d650) returned 1 [0069.355] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.355] AdjustWindowRectEx (in: lpRect=0x14d4a0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d4a0) returned 1 [0069.355] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.355] AdjustWindowRectEx (in: lpRect=0x14d248, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d248) returned 1 [0069.355] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.355] AdjustWindowRectEx (in: lpRect=0x14d650, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d650) returned 1 [0069.355] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.355] AdjustWindowRectEx (in: lpRect=0x14d4a0, dwStyle=0x560100c0, bMenu=0, dwExStyle=0x200 | out: lpRect=0x14d4a0) returned 1 [0069.355] GetSystemMetrics (nIndex=5) returned 1 [0069.355] GetSystemMetrics (nIndex=6) returned 1 [0069.355] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.355] AdjustWindowRectEx (in: lpRect=0x14d650, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d650) returned 1 [0069.356] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.356] AdjustWindowRectEx (in: lpRect=0x14d4a0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d4a0) returned 1 [0069.356] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.356] AdjustWindowRectEx (in: lpRect=0x14d248, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d248) returned 1 [0069.356] GetCurrentActCtx (in: lphActCtx=0x14e2d0 | out: lphActCtx=0x14e2d0*=0xa52648) returned 1 [0069.356] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.356] AdjustWindowRectEx (in: lpRect=0x14e1f0, dwStyle=0x2c80000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x14e1f0) returned 1 [0069.356] GetCursorPos (in: lpPoint=0x2158d70 | out: lpPoint=0x2158d70*(x=694, y=635)) returned 1 [0069.356] MonitorFromPoint (pt=0x27d000002b7, dwFlags=0x2) returned 0x10001 [0069.356] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x14dfa0 | out: lpmi=0x14dfa0) returned 1 [0069.357] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x1b01088c [0069.358] GetDeviceCaps (hdc=0x1b01088c, index=12) returned 32 [0069.358] GetDeviceCaps (hdc=0x1b01088c, index=14) returned 1 [0069.358] DeleteDC (hdc=0x1b01088c) returned 1 [0069.358] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x14e070 | out: lpmi=0x14e070) returned 1 [0069.358] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0069.358] CreateWindowExW (dwExStyle=0x50001, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName="Enter Code", dwStyle=0x2c80000, X=498, Y=321, nWidth=444, nHeight=217, hWndParent=0x0, hMenu=0x0, hInstance=0xcc0000, lpParam=0x0) returned 0x10214 [0069.358] SetWindowLongPtrW (hWnd=0x10214, nIndex=-4, dwNewLong=0x76f7b0ac) returned 0x1aff131c [0069.358] GetWindowLongPtrW (hWnd=0x10214, nIndex=-4) returned 0x76f7b0ac [0069.358] SetWindowLongPtrW (hWnd=0x10214, nIndex=-4, dwNewLong=0x1b00196c) returned 0x76f7b0ac [0069.358] GetWindowLongPtrW (hWnd=0x10214, nIndex=-4) returned 0x1b00196c [0069.359] GetWindowLongPtrW (hWnd=0x10214, nIndex=-16) returned 0x6c80000 [0069.359] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x81, wParam=0x0, lParam=0x14d990) returned 0x1 [0069.359] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x83, wParam=0x0, lParam=0x14da40) returned 0x0 [0069.359] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x1, wParam=0x0, lParam=0x14d960) returned 0x0 [0069.359] GetClientRect (in: hWnd=0x10214, lpRect=0x14d3e0 | out: lpRect=0x14d3e0) returned 1 [0069.359] GetWindowRect (in: hWnd=0x10214, lpRect=0x14d3e0 | out: lpRect=0x14d3e0) returned 1 [0069.360] SetWindowTextW (hWnd=0x10214, lpString="Enter Code") returned 1 [0069.360] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xc, wParam=0x0, lParam=0x212b334) returned 0x1 [0069.360] GetStartupInfoW (in: lpStartupInfo=0x2159250 | out: lpStartupInfo=0x2159250*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SadComputer.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0069.360] GetParent (hWnd=0x10214) returned 0x0 [0069.360] SetWindowLongPtrW (hWnd=0x10214, nIndex=-8, dwNewLong=0x0) returned 0x0 [0069.360] SendMessageW (hWnd=0x10214, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0069.360] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0069.360] SendMessageW (hWnd=0x10214, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0069.360] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0069.361] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0069.361] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0069.361] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0069.361] GetSystemMenu (hWnd=0x10214, bRevert=0) returned 0x40225 [0069.361] GetWindowPlacement (in: hWnd=0x10214, lpwndpl=0x14e2d8 | out: lpwndpl=0x14e2d8) returned 1 [0069.361] EnableMenuItem (hMenu=0x40225, uIDEnableItem=0xf020, uEnable=0x1) returned 0 [0069.361] EnableMenuItem (hMenu=0x40225, uIDEnableItem=0xf030, uEnable=0x1) returned 0 [0069.362] EnableMenuItem (hMenu=0x40225, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0069.362] EnableMenuItem (hMenu=0x40225, uIDEnableItem=0xf120, uEnable=0x1) returned 0 [0069.362] EnableMenuItem (hMenu=0x40225, uIDEnableItem=0xf000, uEnable=0x1) returned 0 [0069.362] GetClientRect (in: hWnd=0x10214, lpRect=0x14e3a0 | out: lpRect=0x14e3a0) returned 1 [0069.362] GetClientRect (in: hWnd=0x10214, lpRect=0x14e2d0 | out: lpRect=0x14e2d0) returned 1 [0069.362] GetWindowRect (in: hWnd=0x10214, lpRect=0x14e2d0 | out: lpRect=0x14e2d0) returned 1 [0069.362] SetWindowPos (hWnd=0x10214, hWndInsertAfter=0xffffffffffffffff, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1 [0069.362] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x46, wParam=0x0, lParam=0x14e260) returned 0x0 [0069.362] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x86, wParam=0x0, lParam=0x10214) returned 0x1 [0069.362] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0069.362] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0069.362] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0069.363] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x46, wParam=0x0, lParam=0x14e260) returned 0x0 [0069.363] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x86, wParam=0x1, lParam=0x401fa) returned 0x1 [0069.363] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0069.363] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0069.364] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0069.365] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x8, wParam=0x10214, lParam=0x0) returned 0x0 [0069.365] GetCapture () returned 0x1020c [0069.365] ReleaseCapture () returned 1 [0069.523] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0069.523] InvalidateRect (hWnd=0x1020c, lpRect=0x0, bErase=0) returned 1 [0069.523] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0069.524] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0069.524] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0069.524] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0069.524] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0069.524] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0069.524] GetParent (hWnd=0x10214) returned 0x0 [0069.524] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0069.524] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7, wParam=0x1020c, lParam=0x0) returned 0x0 [0069.525] GetWindowPlacement (in: hWnd=0x10214, lpwndpl=0x14de38 | out: lpwndpl=0x14de38) returned 1 [0069.525] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x47, wParam=0x0, lParam=0x14e260) returned 0x0 [0069.525] GetClientRect (in: hWnd=0x10214, lpRect=0x14dcd0 | out: lpRect=0x14dcd0) returned 1 [0069.525] GetWindowRect (in: hWnd=0x10214, lpRect=0x14dcd0 | out: lpRect=0x14dcd0) returned 1 [0069.525] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0069.525] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0069.525] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0069.526] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x83, wParam=0x1, lParam=0x14dbc0) returned 0x0 [0069.526] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.526] GetWindowLongPtrW (hWnd=0x10214, nIndex=-16) returned 0x6c80000 [0069.526] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0069.526] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0069.526] GetSystemMetrics (nIndex=42) returned 0 [0069.526] GetWindowTextW (in: hWnd=0x10214, lpString=0x14e0d0, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0069.526] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14e0d0) returned 0xa [0069.526] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0069.526] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0069.526] GetSystemMetrics (nIndex=42) returned 0 [0069.526] GetWindowTextW (in: hWnd=0x10214, lpString=0x14e0d0, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0069.526] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14e0d0) returned 0xa [0069.526] GetCursorPos (in: lpPoint=0x2159580 | out: lpPoint=0x2159580*(x=694, y=635)) returned 1 [0069.527] MonitorFromPoint (pt=0x27b000002b6, dwFlags=0x2) returned 0x10001 [0069.527] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x14df70 | out: lpmi=0x14df70) returned 1 [0069.527] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x1801088d [0069.527] GetDeviceCaps (hdc=0x1801088d, index=12) returned 32 [0069.527] GetDeviceCaps (hdc=0x1801088d, index=14) returned 1 [0069.527] DeleteDC (hdc=0x1801088d) returned 1 [0069.527] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x14e040 | out: lpmi=0x14e040) returned 1 [0069.527] GetWindowLongPtrW (hWnd=0x10214, nIndex=-16) returned 0x6c80000 [0069.527] GetWindowLongPtrW (hWnd=0x10214, nIndex=-20) returned 0x50109 [0069.527] SetWindowLongPtrW (hWnd=0x10214, nIndex=-16, dwNewLong=0x2c80000) returned 0x6c80000 [0069.527] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x14e1b0) returned 0x0 [0069.527] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x14e1b0) returned 0x0 [0069.527] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0069.528] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0069.528] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0069.528] SetWindowLongPtrW (hWnd=0x10214, nIndex=-20, dwNewLong=0x50001) returned 0x50109 [0069.528] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x14e1b0) returned 0x0 [0069.528] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x14e1b0) returned 0x0 [0069.528] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0069.528] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0069.529] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0069.529] SetWindowPos (hWnd=0x10214, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0069.529] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x46, wParam=0x0, lParam=0x14e200) returned 0x0 [0069.529] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x83, wParam=0x1, lParam=0x14e1d0) returned 0x0 [0069.529] GetWindowPlacement (in: hWnd=0x10214, lpwndpl=0x14ddd8 | out: lpwndpl=0x14ddd8) returned 1 [0069.529] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x47, wParam=0x0, lParam=0x14e200) returned 0x0 [0069.529] GetClientRect (in: hWnd=0x10214, lpRect=0x14dc70 | out: lpRect=0x14dc70) returned 1 [0069.529] GetWindowRect (in: hWnd=0x10214, lpRect=0x14dc70 | out: lpRect=0x14dc70) returned 1 [0069.529] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0069.529] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0069.530] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0069.530] RedrawWindow (hWnd=0x10214, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0069.530] GetSystemMenu (hWnd=0x10214, bRevert=0) returned 0x40225 [0069.530] GetWindowPlacement (in: hWnd=0x10214, lpwndpl=0x14e278 | out: lpwndpl=0x14e278) returned 1 [0069.530] EnableMenuItem (hMenu=0x40225, uIDEnableItem=0xf020, uEnable=0x1) returned 1 [0069.530] EnableMenuItem (hMenu=0x40225, uIDEnableItem=0xf030, uEnable=0x1) returned 1 [0069.530] EnableMenuItem (hMenu=0x40225, uIDEnableItem=0xf060, uEnable=0x0) returned 0 [0069.530] EnableMenuItem (hMenu=0x40225, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0069.530] EnableMenuItem (hMenu=0x40225, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0069.530] ShowWindow (hWnd=0x10214, nCmdShow=5) returned 0 [0069.530] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0069.530] GetCurrentActCtx (in: lphActCtx=0x14dcc0 | out: lphActCtx=0x14dcc0*=0xa52648) returned 1 [0069.530] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.530] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0069.530] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r12_ad1", lpWindowName="Send", dwStyle=0x5601000b, X=179, Y=0, nWidth=107, nHeight=23, hWndParent=0x10214, hMenu=0x0, hInstance=0xcc0000, lpParam=0x0) returned 0x10216 [0069.531] SetWindowLongPtrW (hWnd=0x10216, nIndex=-4, dwNewLong=0x7fefba43b20) returned 0x1aff15ec [0069.531] GetWindowLongPtrW (hWnd=0x10216, nIndex=-4) returned 0x7fefba43b20 [0069.531] SetWindowLongPtrW (hWnd=0x10216, nIndex=-4, dwNewLong=0x1b0019bc) returned 0x7fefba43b20 [0069.531] GetWindowLongPtrW (hWnd=0x10216, nIndex=-4) returned 0x1b0019bc [0069.531] GetWindowLongPtrW (hWnd=0x10216, nIndex=-16) returned 0x4601000b [0069.531] GetWindowLongPtrW (hWnd=0x10216, nIndex=-12) returned 0x0 [0069.531] SetWindowLongPtrW (hWnd=0x10216, nIndex=-12, dwNewLong=0x10216) returned 0x0 [0069.531] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x10216, Msg=0x81, wParam=0x0, lParam=0x14d380) returned 0x1 [0069.531] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x10216, Msg=0x83, wParam=0x0, lParam=0x14d430) returned 0x0 [0069.531] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x10216, Msg=0x1, wParam=0x0, lParam=0x14d360) returned 0x0 [0069.531] SendMessageW (hWnd=0x10216, Msg=0x2055, wParam=0x10216, lParam=0x3) returned 0x2 [0069.532] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x0 [0069.532] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x10216, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0069.532] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0069.532] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0069.532] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x10216, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0069.532] RedrawWindow (hWnd=0x10216, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0069.532] RedrawWindow (hWnd=0x10214, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0069.532] GetWindow (hWnd=0x10216, uCmd=0x3) returned 0x0 [0069.532] GetClientRect (in: hWnd=0x10216, lpRect=0x14cd70 | out: lpRect=0x14cd70) returned 1 [0069.532] GetWindowRect (in: hWnd=0x10216, lpRect=0x14cd70 | out: lpRect=0x14cd70) returned 1 [0069.532] GetParent (hWnd=0x10216) returned 0x10214 [0069.532] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10214, lpPoints=0x14cd70, cPoints=0x2 | out: lpPoints=0x14cd70) returned -22610421 [0069.533] SetWindowTextW (hWnd=0x10216, lpString="Send") returned 1 [0069.533] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x10216, Msg=0xc, wParam=0x0, lParam=0x2154b04) returned 0x1 [0069.533] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x10216, Msg=0x5, wParam=0x0, lParam=0x17006b) returned 0x0 [0069.533] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x10216, Msg=0x3, wParam=0x0, lParam=0xb3) returned 0x0 [0069.533] GetClientRect (in: hWnd=0x10216, lpRect=0x14cea0 | out: lpRect=0x14cea0) returned 1 [0069.533] GetWindowRect (in: hWnd=0x10216, lpRect=0x14cea0 | out: lpRect=0x14cea0) returned 1 [0069.533] GetParent (hWnd=0x10216) returned 0x10214 [0069.533] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10214, lpPoints=0x14cea0, cPoints=0x2 | out: lpPoints=0x14cea0) returned -22610421 [0069.533] SendMessageW (hWnd=0x10216, Msg=0x2210, wParam=0x2160001, lParam=0x10216) returned 0x0 [0069.533] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x10216, Msg=0x2210, wParam=0x2160001, lParam=0x10216) returned 0x0 [0069.533] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x10216, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0069.533] GetParent (hWnd=0x10216) returned 0x10214 [0069.533] GetCurrentActCtx (in: lphActCtx=0x14dcc0 | out: lphActCtx=0x14dcc0*=0xa52648) returned 1 [0069.533] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.534] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0069.534] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.BUTTON.app.0.141b42a_r12_ad1", lpWindowName="Check", dwStyle=0x5601000b, X=18, Y=154, nWidth=408, nHeight=23, hWndParent=0x10214, hMenu=0x0, hInstance=0xcc0000, lpParam=0x0) returned 0x10218 [0069.534] SetWindowLongPtrW (hWnd=0x10218, nIndex=-4, dwNewLong=0x7fefba43b20) returned 0x1aff15ec [0069.534] GetWindowLongPtrW (hWnd=0x10218, nIndex=-4) returned 0x7fefba43b20 [0069.534] SetWindowLongPtrW (hWnd=0x10218, nIndex=-4, dwNewLong=0x1b001a0c) returned 0x7fefba43b20 [0069.534] GetWindowLongPtrW (hWnd=0x10218, nIndex=-4) returned 0x1b001a0c [0069.534] GetWindowLongPtrW (hWnd=0x10218, nIndex=-16) returned 0x4601000b [0069.534] GetWindowLongPtrW (hWnd=0x10218, nIndex=-12) returned 0x0 [0069.534] SetWindowLongPtrW (hWnd=0x10218, nIndex=-12, dwNewLong=0x10218) returned 0x0 [0069.534] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x10218, Msg=0x81, wParam=0x0, lParam=0x14d380) returned 0x1 [0069.534] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x10218, Msg=0x83, wParam=0x0, lParam=0x14d430) returned 0x0 [0069.534] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x10218, Msg=0x1, wParam=0x0, lParam=0x14d360) returned 0x0 [0069.535] SendMessageW (hWnd=0x10218, Msg=0x2055, wParam=0x10218, lParam=0x3) returned 0x2 [0069.535] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0069.535] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x10218, Msg=0x127, wParam=0x3, lParam=0x0) returned 0x0 [0069.535] GetWindow (hWnd=0x10218, uCmd=0x3) returned 0x10216 [0069.535] GetClientRect (in: hWnd=0x10218, lpRect=0x14cd70 | out: lpRect=0x14cd70) returned 1 [0069.535] GetWindowRect (in: hWnd=0x10218, lpRect=0x14cd70 | out: lpRect=0x14cd70) returned 1 [0069.535] GetParent (hWnd=0x10218) returned 0x10214 [0069.535] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10214, lpPoints=0x14cd70, cPoints=0x2 | out: lpPoints=0x14cd70) returned -22610421 [0069.536] SetWindowTextW (hWnd=0x10218, lpString="Check") returned 1 [0069.536] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x10218, Msg=0xc, wParam=0x0, lParam=0x212b114) returned 0x1 [0069.536] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x10218, Msg=0x5, wParam=0x0, lParam=0x170198) returned 0x0 [0069.536] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x10218, Msg=0x3, wParam=0x0, lParam=0x9a0012) returned 0x0 [0069.536] GetClientRect (in: hWnd=0x10218, lpRect=0x14cea0 | out: lpRect=0x14cea0) returned 1 [0069.536] GetWindowRect (in: hWnd=0x10218, lpRect=0x14cea0 | out: lpRect=0x14cea0) returned 1 [0069.536] GetParent (hWnd=0x10218) returned 0x10214 [0069.537] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10214, lpPoints=0x14cea0, cPoints=0x2 | out: lpPoints=0x14cea0) returned -22610421 [0069.537] SendMessageW (hWnd=0x10218, Msg=0x2210, wParam=0x2180001, lParam=0x10218) returned 0x0 [0069.537] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x10218, Msg=0x2210, wParam=0x2180001, lParam=0x10218) returned 0x0 [0069.537] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x10218, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0069.537] GetParent (hWnd=0x10218) returned 0x10214 [0069.537] GetCurrentActCtx (in: lphActCtx=0x14dc80 | out: lphActCtx=0x14dc80*=0xa52648) returned 1 [0069.537] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.537] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0069.537] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=166, Y=57, nWidth=217, nHeight=22, hWndParent=0x10214, hMenu=0x0, hInstance=0xcc0000, lpParam=0x0) returned 0x1021a [0069.537] SetWindowLongPtrW (hWnd=0x1021a, nIndex=-4, dwNewLong=0x7fefba4975c) returned 0x1b00173c [0069.537] GetWindowLongPtrW (hWnd=0x1021a, nIndex=-4) returned 0x7fefba4975c [0069.538] SetWindowLongPtrW (hWnd=0x1021a, nIndex=-4, dwNewLong=0x1b001a5c) returned 0x7fefba4975c [0069.538] GetWindowLongPtrW (hWnd=0x1021a, nIndex=-4) returned 0x1b001a5c [0069.538] GetWindowLongPtrW (hWnd=0x1021a, nIndex=-16) returned 0x460100c0 [0069.538] GetWindowLongPtrW (hWnd=0x1021a, nIndex=-12) returned 0x0 [0069.538] SetWindowLongPtrW (hWnd=0x1021a, nIndex=-12, dwNewLong=0x1021a) returned 0x0 [0069.538] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021a, Msg=0x81, wParam=0x0, lParam=0x14d340) returned 0x1 [0069.538] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021a, Msg=0x83, wParam=0x0, lParam=0x14d3f0) returned 0x0 [0069.538] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021a, Msg=0x1, wParam=0x0, lParam=0x14d340) returned 0x1 [0069.538] SendMessageW (hWnd=0x1021a, Msg=0x2055, wParam=0x1021a, lParam=0x3) returned 0x2 [0069.538] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0069.538] GetWindow (hWnd=0x1021a, uCmd=0x3) returned 0x10218 [0069.538] GetClientRect (in: hWnd=0x1021a, lpRect=0x14cdb0 | out: lpRect=0x14cdb0) returned 1 [0069.538] GetWindowRect (in: hWnd=0x1021a, lpRect=0x14cdb0 | out: lpRect=0x14cdb0) returned 1 [0069.538] GetParent (hWnd=0x1021a) returned 0x10214 [0069.538] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10214, lpPoints=0x14cdb0, cPoints=0x2 | out: lpPoints=0x14cdb0) returned -22610421 [0069.539] GetDC (hWnd=0x0) returned 0x5010830 [0069.539] GdipCreateFromHDC (hdc=0x5010830, graphics=0x14ca08) returned 0x0 [0069.539] CoTaskMemAlloc (cb=0x5c) returned 0xa5ed70 [0069.539] GdipGetLogFontW (font=0x1ba30a30, graphics=0x1afd8140, logfontW=0xa5ed70) returned 0x0 [0069.539] CoTaskMemFree (pv=0xa5ed70) [0069.539] CoTaskMemAlloc (cb=0x5c) returned 0xa5ed70 [0069.540] CoTaskMemFree (pv=0xa5ed70) [0069.540] CoTaskMemAlloc (cb=0x5c) returned 0xa5ed70 [0069.540] CoTaskMemFree (pv=0xa5ed70) [0069.540] GdipDeleteGraphics (graphics=0x1afd8140) returned 0x0 [0069.540] ReleaseDC (hWnd=0x0, hDC=0x5010830) returned 1 [0069.540] CoTaskMemAlloc (cb=0x5c) returned 0xa5ed70 [0069.540] CreateFontIndirectW (lplf=0xa5ed70) returned 0x200a088d [0069.540] CoTaskMemFree (pv=0xa5ed70) [0069.540] SendMessageW (hWnd=0x1021a, Msg=0x30, wParam=0x200a088d, lParam=0x0) returned 0x1 [0069.540] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021a, Msg=0x30, wParam=0x200a088d, lParam=0x0) returned 0x1 [0069.540] SendMessageW (hWnd=0x1021a, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0069.541] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021a, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0069.541] GetSystemMetrics (nIndex=5) returned 1 [0069.541] GetSystemMetrics (nIndex=6) returned 1 [0069.541] SendMessageW (hWnd=0x1021a, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0069.541] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021a, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0069.541] SendMessageW (hWnd=0x1021a, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0069.541] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021a, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0069.541] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021a, Msg=0x5, wParam=0x0, lParam=0x1200d5) returned 0x0 [0069.541] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021a, Msg=0x3, wParam=0x0, lParam=0x3b00a8) returned 0x0 [0069.541] GetClientRect (in: hWnd=0x1021a, lpRect=0x14cec0 | out: lpRect=0x14cec0) returned 1 [0069.541] GetWindowRect (in: hWnd=0x1021a, lpRect=0x14cec0 | out: lpRect=0x14cec0) returned 1 [0069.542] GetParent (hWnd=0x1021a) returned 0x10214 [0069.542] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10214, lpPoints=0x14cec0, cPoints=0x2 | out: lpPoints=0x14cec0) returned -22610421 [0069.542] SendMessageW (hWnd=0x1021a, Msg=0x2210, wParam=0x21a0001, lParam=0x1021a) returned 0x0 [0069.542] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021a, Msg=0x2210, wParam=0x21a0001, lParam=0x1021a) returned 0x0 [0069.542] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021a, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0069.542] GetParent (hWnd=0x1021a) returned 0x10214 [0069.542] GetCurrentActCtx (in: lphActCtx=0x14dcc0 | out: lphActCtx=0x14dcc0*=0xa52648) returned 1 [0069.542] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.542] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0069.542] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName="Code:", dwStyle=0x5600000d, X=121, Y=60, nWidth=38, nHeight=15, hWndParent=0x10214, hMenu=0x0, hInstance=0xcc0000, lpParam=0x0) returned 0x1021c [0069.542] SetWindowLongPtrW (hWnd=0x1021c, nIndex=-4, dwNewLong=0x7fefba461b4) returned 0x1aff154c [0069.542] GetWindowLongPtrW (hWnd=0x1021c, nIndex=-4) returned 0x7fefba461b4 [0069.543] SetWindowLongPtrW (hWnd=0x1021c, nIndex=-4, dwNewLong=0x1b001aac) returned 0x7fefba461b4 [0069.543] GetWindowLongPtrW (hWnd=0x1021c, nIndex=-4) returned 0x1b001aac [0069.543] GetWindowLongPtrW (hWnd=0x1021c, nIndex=-16) returned 0x4600000d [0069.543] GetWindowLongPtrW (hWnd=0x1021c, nIndex=-12) returned 0x0 [0069.543] SetWindowLongPtrW (hWnd=0x1021c, nIndex=-12, dwNewLong=0x1021c) returned 0x0 [0069.543] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x1021c, Msg=0x81, wParam=0x0, lParam=0x14d380) returned 0x1 [0069.543] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x1021c, Msg=0x83, wParam=0x0, lParam=0x14d430) returned 0x0 [0069.543] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x1021c, Msg=0x1, wParam=0x0, lParam=0x14d360) returned 0x0 [0069.543] GetWindow (hWnd=0x1021c, uCmd=0x3) returned 0x1021a [0069.543] GetClientRect (in: hWnd=0x1021c, lpRect=0x14cda0 | out: lpRect=0x14cda0) returned 1 [0069.543] GetWindowRect (in: hWnd=0x1021c, lpRect=0x14cda0 | out: lpRect=0x14cda0) returned 1 [0069.543] GetParent (hWnd=0x1021c) returned 0x10214 [0069.543] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10214, lpPoints=0x14cda0, cPoints=0x2 | out: lpPoints=0x14cda0) returned -22610421 [0069.544] SetWindowTextW (hWnd=0x1021c, lpString="Code:") returned 1 [0069.544] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x1021c, Msg=0xc, wParam=0x0, lParam=0x2154adc) returned 0x1 [0069.544] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x1021c, Msg=0x5, wParam=0x0, lParam=0xf0026) returned 0x0 [0069.544] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x1021c, Msg=0x3, wParam=0x0, lParam=0x3c0079) returned 0x0 [0069.544] GetClientRect (in: hWnd=0x1021c, lpRect=0x14ced0 | out: lpRect=0x14ced0) returned 1 [0069.544] GetWindowRect (in: hWnd=0x1021c, lpRect=0x14ced0 | out: lpRect=0x14ced0) returned 1 [0069.544] GetParent (hWnd=0x1021c) returned 0x10214 [0069.544] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10214, lpPoints=0x14ced0, cPoints=0x2 | out: lpPoints=0x14ced0) returned -22610421 [0069.544] SendMessageW (hWnd=0x1021c, Msg=0x2210, wParam=0x21c0001, lParam=0x1021c) returned 0x0 [0069.544] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x1021c, Msg=0x2210, wParam=0x21c0001, lParam=0x1021c) returned 0x0 [0069.544] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x1021c, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0069.544] GetParent (hWnd=0x1021c) returned 0x10214 [0069.544] GetCurrentActCtx (in: lphActCtx=0x14dc80 | out: lphActCtx=0x14dc80*=0xa52648) returned 1 [0069.545] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.545] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0069.545] CreateWindowExW (dwExStyle=0x200, lpClassName="WindowsForms10.EDIT.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x560100c0, X=166, Y=29, nWidth=217, nHeight=22, hWndParent=0x10214, hMenu=0x0, hInstance=0xcc0000, lpParam=0x0) returned 0x1021e [0069.545] SetWindowLongPtrW (hWnd=0x1021e, nIndex=-4, dwNewLong=0x7fefba4975c) returned 0x1b00173c [0069.545] GetWindowLongPtrW (hWnd=0x1021e, nIndex=-4) returned 0x7fefba4975c [0069.545] SetWindowLongPtrW (hWnd=0x1021e, nIndex=-4, dwNewLong=0x1b001afc) returned 0x7fefba4975c [0069.545] GetWindowLongPtrW (hWnd=0x1021e, nIndex=-4) returned 0x1b001afc [0069.545] GetWindowLongPtrW (hWnd=0x1021e, nIndex=-16) returned 0x460100c0 [0069.545] GetWindowLongPtrW (hWnd=0x1021e, nIndex=-12) returned 0x0 [0069.545] SetWindowLongPtrW (hWnd=0x1021e, nIndex=-12, dwNewLong=0x1021e) returned 0x0 [0069.545] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0x81, wParam=0x0, lParam=0x14d340) returned 0x1 [0069.546] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0x83, wParam=0x0, lParam=0x14d3f0) returned 0x0 [0069.546] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0x1, wParam=0x0, lParam=0x14d340) returned 0x1 [0069.546] SendMessageW (hWnd=0x1021e, Msg=0x2055, wParam=0x1021e, lParam=0x3) returned 0x2 [0069.546] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0069.546] GetWindow (hWnd=0x1021e, uCmd=0x3) returned 0x1021c [0069.546] GetClientRect (in: hWnd=0x1021e, lpRect=0x14cdb0 | out: lpRect=0x14cdb0) returned 1 [0069.546] GetWindowRect (in: hWnd=0x1021e, lpRect=0x14cdb0 | out: lpRect=0x14cdb0) returned 1 [0069.546] GetParent (hWnd=0x1021e) returned 0x10214 [0069.546] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10214, lpPoints=0x14cdb0, cPoints=0x2 | out: lpPoints=0x14cdb0) returned -22610421 [0069.546] SendMessageW (hWnd=0x1021e, Msg=0x30, wParam=0x200a088d, lParam=0x0) returned 0x1 [0069.546] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0x30, wParam=0x200a088d, lParam=0x0) returned 0x1 [0069.546] SendMessageW (hWnd=0x1021e, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0069.546] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0xd3, wParam=0x3, lParam=0x0) returned 0x0 [0069.547] GetSystemMetrics (nIndex=5) returned 1 [0069.547] GetSystemMetrics (nIndex=6) returned 1 [0069.547] SendMessageW (hWnd=0x1021e, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0069.547] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0xc5, wParam=0x7fff, lParam=0x0) returned 0x1 [0069.547] SendMessageW (hWnd=0x1021e, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0069.547] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0xd2, wParam=0x0, lParam=0x0) returned 0x0 [0069.550] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0x5, wParam=0x0, lParam=0x1200d5) returned 0x0 [0069.550] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0x3, wParam=0x0, lParam=0x1f00a8) returned 0x0 [0069.550] GetClientRect (in: hWnd=0x1021e, lpRect=0x14cec0 | out: lpRect=0x14cec0) returned 1 [0069.550] GetWindowRect (in: hWnd=0x1021e, lpRect=0x14cec0 | out: lpRect=0x14cec0) returned 1 [0069.550] GetParent (hWnd=0x1021e) returned 0x10214 [0069.550] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10214, lpPoints=0x14cec0, cPoints=0x2 | out: lpPoints=0x14cec0) returned -22610421 [0069.550] SendMessageW (hWnd=0x1021e, Msg=0x2210, wParam=0x21e0001, lParam=0x1021e) returned 0x0 [0069.550] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0x2210, wParam=0x21e0001, lParam=0x1021e) returned 0x0 [0069.550] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0069.550] GetParent (hWnd=0x1021e) returned 0x10214 [0069.551] GetCurrentActCtx (in: lphActCtx=0x14dcc0 | out: lphActCtx=0x14dcc0*=0xa52648) returned 1 [0069.551] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0069.551] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0069.551] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName="E-Mail Address:", dwStyle=0x5600000d, X=66, Y=31, nWidth=93, nHeight=15, hWndParent=0x10214, hMenu=0x0, hInstance=0xcc0000, lpParam=0x0) returned 0x10220 [0069.551] SetWindowLongPtrW (hWnd=0x10220, nIndex=-4, dwNewLong=0x7fefba461b4) returned 0x1aff154c [0069.551] GetWindowLongPtrW (hWnd=0x10220, nIndex=-4) returned 0x7fefba461b4 [0069.551] SetWindowLongPtrW (hWnd=0x10220, nIndex=-4, dwNewLong=0x1b001b4c) returned 0x7fefba461b4 [0069.551] GetWindowLongPtrW (hWnd=0x10220, nIndex=-4) returned 0x1b001b4c [0069.551] GetWindowLongPtrW (hWnd=0x10220, nIndex=-16) returned 0x4600000d [0069.551] GetWindowLongPtrW (hWnd=0x10220, nIndex=-12) returned 0x0 [0069.551] SetWindowLongPtrW (hWnd=0x10220, nIndex=-12, dwNewLong=0x10220) returned 0x0 [0069.551] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10220, Msg=0x81, wParam=0x0, lParam=0x14d380) returned 0x1 [0069.552] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10220, Msg=0x83, wParam=0x0, lParam=0x14d430) returned 0x0 [0069.552] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10220, Msg=0x1, wParam=0x0, lParam=0x14d350) returned 0x0 [0069.552] GetWindow (hWnd=0x10220, uCmd=0x3) returned 0x1021e [0069.552] GetClientRect (in: hWnd=0x10220, lpRect=0x14cd90 | out: lpRect=0x14cd90) returned 1 [0069.552] GetWindowRect (in: hWnd=0x10220, lpRect=0x14cd90 | out: lpRect=0x14cd90) returned 1 [0069.552] GetParent (hWnd=0x10220) returned 0x10214 [0069.552] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10214, lpPoints=0x14cd90, cPoints=0x2 | out: lpPoints=0x14cd90) returned -22610421 [0069.552] SetWindowTextW (hWnd=0x10220, lpString="E-Mail Address:") returned 1 [0069.552] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10220, Msg=0xc, wParam=0x0, lParam=0x2154aa4) returned 0x1 [0069.553] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10220, Msg=0x5, wParam=0x0, lParam=0xf005d) returned 0x0 [0069.553] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10220, Msg=0x3, wParam=0x0, lParam=0x1f0042) returned 0x0 [0069.553] GetClientRect (in: hWnd=0x10220, lpRect=0x14ced0 | out: lpRect=0x14ced0) returned 1 [0069.553] GetWindowRect (in: hWnd=0x10220, lpRect=0x14ced0 | out: lpRect=0x14ced0) returned 1 [0069.553] GetParent (hWnd=0x10220) returned 0x10214 [0069.553] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x10214, lpPoints=0x14ced0, cPoints=0x2 | out: lpPoints=0x14ced0) returned -22610421 [0069.553] SendMessageW (hWnd=0x10220, Msg=0x2210, wParam=0x2200001, lParam=0x10220) returned 0x0 [0069.553] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10220, Msg=0x2210, wParam=0x2200001, lParam=0x10220) returned 0x0 [0069.553] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10220, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0069.553] GetParent (hWnd=0x10220) returned 0x10214 [0069.553] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0069.553] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0069.553] GetSystemMetrics (nIndex=42) returned 0 [0069.553] GetWindowTextW (in: hWnd=0x10214, lpString=0x14dc30, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0069.553] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14dc30) returned 0xa [0069.557] InvalidateRect (hWnd=0x10216, lpRect=0x0, bErase=0) returned 1 [0069.557] InvalidateRect (hWnd=0x10218, lpRect=0x0, bErase=0) returned 1 [0069.557] InvalidateRect (hWnd=0x1021a, lpRect=0x0, bErase=1) returned 1 [0069.557] InvalidateRect (hWnd=0x1021c, lpRect=0x0, bErase=1) returned 1 [0069.557] InvalidateRect (hWnd=0x1021e, lpRect=0x0, bErase=1) returned 1 [0069.557] InvalidateRect (hWnd=0x10220, lpRect=0x0, bErase=1) returned 1 [0069.557] GetWindowThreadProcessId (in: hWnd=0x10214, lpdwProcessId=0x14dd00 | out: lpdwProcessId=0x14dd00) returned 0xa50 [0069.557] GetCurrentThreadId () returned 0xa50 [0069.557] PostMessageW (hWnd=0x10214, Msg=0xc146, wParam=0x0, lParam=0x0) returned 1 [0069.557] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0069.557] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0069.557] GetSystemMetrics (nIndex=42) returned 0 [0069.557] GetWindowTextW (in: hWnd=0x10214, lpString=0x14dc00, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0069.557] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14dc00) returned 0xa [0069.558] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x46, wParam=0x0, lParam=0x14e410) returned 0x0 [0069.558] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0069.558] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0069.558] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0069.558] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0069.559] GetWindowPlacement (in: hWnd=0x10214, lpwndpl=0x14e008 | out: lpwndpl=0x14e008) returned 1 [0069.559] GetClientRect (in: hWnd=0x10214, lpRect=0x14df20 | out: lpRect=0x14df20) returned 1 [0069.559] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0069.559] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0069.559] GetSystemMetrics (nIndex=42) returned 0 [0069.559] GetWindowTextW (in: hWnd=0x10214, lpString=0x14dc80, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0069.559] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14dc80) returned 0xa [0069.559] GetClientRect (in: hWnd=0x10214, lpRect=0x14dd08 | out: lpRect=0x14dd08) returned 1 [0069.560] GetCurrentObject (hdc=0x5010830, type=0x1) returned 0x1b00017 [0069.560] GetCurrentObject (hdc=0x5010830, type=0x2) returned 0x1900010 [0069.560] GetCurrentObject (hdc=0x5010830, type=0x7) returned 0x1050032 [0069.560] GetCurrentObject (hdc=0x5010830, type=0x6) returned 0x18a002e [0069.560] SaveDC (hdc=0x5010830) returned 1 [0069.560] GetNearestColor (hdc=0x5010830, color=0xa0) returned 0xa0 [0069.560] CreateSolidBrush (color=0xa0) returned 0x23100860 [0069.560] FillRect (hDC=0x5010830, lprc=0x14d9f8, hbr=0x23100860) returned 1 [0069.560] DeleteObject (ho=0x23100860) returned 1 [0069.560] RestoreDC (hdc=0x5010830, nSavedDC=-1) returned 1 [0069.560] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x10216, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0069.560] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x10216, Msg=0x14, wParam=0x5010825, lParam=0x0) returned 0x1 [0069.560] GetStockObject (i=5) returned 0x1900015 [0069.561] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x10218, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0069.561] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x10218, Msg=0x14, wParam=0xb010256, lParam=0x0) returned 0x1 [0069.561] GetStockObject (i=5) returned 0x1900015 [0069.561] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0069.561] SetTextColor (hdc=0x5010825, color=0x0) returned 0x0 [0069.561] SetBkColor (hdc=0x5010825, color=0xffffff) returned 0xffffff [0069.562] GetWindowPlacement (in: hWnd=0x10214, lpwndpl=0x14d6a8 | out: lpwndpl=0x14d6a8) returned 1 [0069.562] GetClientRect (in: hWnd=0x10214, lpRect=0x14d5c0 | out: lpRect=0x14d5c0) returned 1 [0069.562] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0069.562] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0069.562] GetSystemMetrics (nIndex=42) returned 0 [0069.562] GetWindowTextW (in: hWnd=0x10214, lpString=0x14d320, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0069.562] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14d320) returned 0xa [0069.562] GetClientRect (in: hWnd=0x10214, lpRect=0x14d3a8 | out: lpRect=0x14d3a8) returned 1 [0069.562] GetCurrentObject (hdc=0x4201024b, type=0x1) returned 0x1b00017 [0069.562] GetCurrentObject (hdc=0x4201024b, type=0x2) returned 0x1900010 [0069.562] GetCurrentObject (hdc=0x4201024b, type=0x7) returned 0x6205007f [0069.562] GetCurrentObject (hdc=0x4201024b, type=0x6) returned 0x18a002e [0069.562] SaveDC (hdc=0x4201024b) returned 1 [0069.562] GetNearestColor (hdc=0x4201024b, color=0xa0) returned 0xa0 [0069.562] CreateSolidBrush (color=0xa0) returned 0x24100860 [0069.562] FillRect (hDC=0x4201024b, lprc=0x14d098, hbr=0x24100860) returned 1 [0069.563] DeleteObject (ho=0x24100860) returned 1 [0069.563] RestoreDC (hdc=0x4201024b, nSavedDC=-1) returned 1 [0069.563] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0069.563] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0069.563] GetSystemMetrics (nIndex=42) returned 0 [0069.563] GetWindowTextW (in: hWnd=0x10214, lpString=0x14d250, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0069.563] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14d250) returned 0xa [0069.563] GetClientRect (in: hWnd=0x10214, lpRect=0x14d2d8 | out: lpRect=0x14d2d8) returned 1 [0069.563] GetCurrentObject (hdc=0x4201024b, type=0x1) returned 0x1b00017 [0069.563] GetCurrentObject (hdc=0x4201024b, type=0x2) returned 0x1900010 [0069.563] GetCurrentObject (hdc=0x4201024b, type=0x7) returned 0x6205007f [0069.563] GetCurrentObject (hdc=0x4201024b, type=0x6) returned 0x18a002e [0069.563] SaveDC (hdc=0x4201024b) returned 1 [0069.563] GetNearestColor (hdc=0x4201024b, color=0xa0) returned 0xa0 [0069.563] CreateSolidBrush (color=0xa0) returned 0x25100860 [0069.563] FillRect (hDC=0x4201024b, lprc=0x14cfc8, hbr=0x25100860) returned 1 [0069.563] DeleteObject (ho=0x25100860) returned 1 [0069.563] RestoreDC (hdc=0x4201024b, nSavedDC=-1) returned 1 [0069.563] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0069.564] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0069.564] GetSystemMetrics (nIndex=42) returned 0 [0069.564] GetWindowTextW (in: hWnd=0x10214, lpString=0x14d250, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0069.564] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14d250) returned 0xa [0069.564] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021a, Msg=0x14, wParam=0x5010825, lParam=0x0) returned 0x1 [0069.564] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x1021c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0069.565] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0069.565] SetTextColor (hdc=0x5010825, color=0x0) returned 0x0 [0069.565] SetBkColor (hdc=0x5010825, color=0xffffff) returned 0xffffff [0069.565] GetSysColorBrush (nIndex=5) returned 0x1100060 [0069.565] GetWindowPlacement (in: hWnd=0x10214, lpwndpl=0x14d6a8 | out: lpwndpl=0x14d6a8) returned 1 [0069.565] GetClientRect (in: hWnd=0x10214, lpRect=0x14d5c0 | out: lpRect=0x14d5c0) returned 1 [0069.565] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0069.565] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0069.565] GetSystemMetrics (nIndex=42) returned 0 [0069.565] GetWindowTextW (in: hWnd=0x10214, lpString=0x14d320, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0069.565] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14d320) returned 0xa [0069.565] GetClientRect (in: hWnd=0x10214, lpRect=0x14d3a8 | out: lpRect=0x14d3a8) returned 1 [0069.565] GetCurrentObject (hdc=0x4301024b, type=0x1) returned 0x1b00017 [0069.565] GetCurrentObject (hdc=0x4301024b, type=0x2) returned 0x1900010 [0069.565] GetCurrentObject (hdc=0x4301024b, type=0x7) returned 0x6205007f [0069.565] GetCurrentObject (hdc=0x4301024b, type=0x6) returned 0x18a002e [0069.565] SaveDC (hdc=0x4301024b) returned 1 [0069.565] GetNearestColor (hdc=0x4301024b, color=0xa0) returned 0xa0 [0069.565] CreateSolidBrush (color=0xa0) returned 0x26100860 [0069.565] FillRect (hDC=0x4301024b, lprc=0x14d098, hbr=0x26100860) returned 1 [0069.566] DeleteObject (ho=0x26100860) returned 1 [0069.566] RestoreDC (hdc=0x4301024b, nSavedDC=-1) returned 1 [0069.566] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0069.566] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0069.566] GetSystemMetrics (nIndex=42) returned 0 [0069.566] GetWindowTextW (in: hWnd=0x10214, lpString=0x14d250, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0069.566] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14d250) returned 0xa [0069.566] GetClientRect (in: hWnd=0x10214, lpRect=0x14d2d8 | out: lpRect=0x14d2d8) returned 1 [0069.566] GetCurrentObject (hdc=0x4301024b, type=0x1) returned 0x1b00017 [0069.566] GetCurrentObject (hdc=0x4301024b, type=0x2) returned 0x1900010 [0069.566] GetCurrentObject (hdc=0x4301024b, type=0x7) returned 0x6205007f [0069.566] GetCurrentObject (hdc=0x4301024b, type=0x6) returned 0x18a002e [0069.566] SaveDC (hdc=0x4301024b) returned 1 [0069.566] GetNearestColor (hdc=0x4301024b, color=0xa0) returned 0xa0 [0069.566] CreateSolidBrush (color=0xa0) returned 0x27100860 [0069.566] FillRect (hDC=0x4301024b, lprc=0x14cfc8, hbr=0x27100860) returned 1 [0069.566] DeleteObject (ho=0x27100860) returned 1 [0069.566] RestoreDC (hdc=0x4301024b, nSavedDC=-1) returned 1 [0069.566] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0069.566] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0069.567] GetSystemMetrics (nIndex=42) returned 0 [0069.567] GetWindowTextW (in: hWnd=0x10214, lpString=0x14d250, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0069.567] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14d250) returned 0xa [0069.567] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0x14, wParam=0x5010825, lParam=0x0) returned 0x1 [0069.567] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10220, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0069.567] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14e008 | out: lpwndpl=0x14e008) returned 1 [0069.567] GetClientRect (in: hWnd=0x401fa, lpRect=0x14df20 | out: lpRect=0x14df20) returned 1 [0069.568] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0069.568] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0069.568] GetSystemMetrics (nIndex=42) returned 0 [0069.568] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14dc80, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0069.568] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14dc80) returned 0xc [0069.568] GetClientRect (in: hWnd=0x401fa, lpRect=0x14dd08 | out: lpRect=0x14dd08) returned 1 [0069.568] GetCurrentObject (hdc=0x5010825, type=0x1) returned 0x1b00017 [0069.568] GetCurrentObject (hdc=0x5010825, type=0x2) returned 0x1900010 [0069.568] GetCurrentObject (hdc=0x5010825, type=0x7) returned 0x1050032 [0069.568] GetCurrentObject (hdc=0x5010825, type=0x6) returned 0x18a002e [0069.568] SaveDC (hdc=0x5010825) returned 1 [0069.568] GetNearestColor (hdc=0x5010825, color=0xa0) returned 0xa0 [0069.568] CreateSolidBrush (color=0xa0) returned 0x28100860 [0069.568] FillRect (hDC=0x5010825, lprc=0x14d9f8, hbr=0x28100860) returned 1 [0069.568] DeleteObject (ho=0x28100860) returned 1 [0069.568] RestoreDC (hdc=0x5010825, nSavedDC=-1) returned 1 [0069.569] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301fc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0069.569] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301fc, Msg=0x14, wParam=0xb010256, lParam=0x0) returned 0x1 [0069.569] GetStockObject (i=5) returned 0x1900015 [0069.569] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0069.569] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201dc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0069.570] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10206, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0069.570] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10208, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0069.570] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0069.570] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x138, wParam=0xb010256, lParam=0x1020a) returned 0x1100059 [0069.571] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14d6a8 | out: lpwndpl=0x14d6a8) returned 1 [0069.571] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d5c0 | out: lpRect=0x14d5c0) returned 1 [0069.571] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0069.571] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0069.571] GetSystemMetrics (nIndex=42) returned 0 [0069.571] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d320, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0069.571] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d320) returned 0xc [0069.571] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d3a8 | out: lpRect=0x14d3a8) returned 1 [0069.571] GetCurrentObject (hdc=0x4401024b, type=0x1) returned 0x1b00017 [0069.571] GetCurrentObject (hdc=0x4401024b, type=0x2) returned 0x1900010 [0069.571] GetCurrentObject (hdc=0x4401024b, type=0x7) returned 0x6205007f [0069.571] GetCurrentObject (hdc=0x4401024b, type=0x6) returned 0x18a002e [0069.571] SaveDC (hdc=0x4401024b) returned 1 [0069.571] GetNearestColor (hdc=0x4401024b, color=0xa0) returned 0xa0 [0069.571] CreateSolidBrush (color=0xa0) returned 0x29100860 [0069.571] FillRect (hDC=0x4401024b, lprc=0x14d098, hbr=0x29100860) returned 1 [0069.571] DeleteObject (ho=0x29100860) returned 1 [0069.571] RestoreDC (hdc=0x4401024b, nSavedDC=-1) returned 1 [0069.572] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0069.572] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0069.572] GetSystemMetrics (nIndex=42) returned 0 [0069.572] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d250, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0069.572] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d250) returned 0xc [0069.572] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d2d8 | out: lpRect=0x14d2d8) returned 1 [0069.572] GetCurrentObject (hdc=0x4401024b, type=0x1) returned 0x1b00017 [0069.572] GetCurrentObject (hdc=0x4401024b, type=0x2) returned 0x1900010 [0069.572] GetCurrentObject (hdc=0x4401024b, type=0x7) returned 0x6205007f [0069.572] GetCurrentObject (hdc=0x4401024b, type=0x6) returned 0x18a002e [0069.572] SaveDC (hdc=0x4401024b) returned 1 [0069.572] GetNearestColor (hdc=0x4401024b, color=0xa0) returned 0xa0 [0069.572] CreateSolidBrush (color=0xa0) returned 0x2a100860 [0069.572] FillRect (hDC=0x4401024b, lprc=0x14cfc8, hbr=0x2a100860) returned 1 [0069.572] DeleteObject (ho=0x2a100860) returned 1 [0069.572] RestoreDC (hdc=0x4401024b, nSavedDC=-1) returned 1 [0069.572] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0069.572] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0069.572] GetSystemMetrics (nIndex=42) returned 0 [0069.572] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d250, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0069.572] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d250) returned 0xc [0069.573] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020a, Msg=0x14, wParam=0xb010256, lParam=0x0) returned 0x1 [0069.573] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0069.573] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x138, wParam=0x5010825, lParam=0x1020e) returned 0x1100059 [0069.573] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14d6a8 | out: lpwndpl=0x14d6a8) returned 1 [0069.573] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d5c0 | out: lpRect=0x14d5c0) returned 1 [0069.573] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0069.573] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0069.573] GetSystemMetrics (nIndex=42) returned 0 [0069.573] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d320, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0069.573] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d320) returned 0xc [0069.574] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d3a8 | out: lpRect=0x14d3a8) returned 1 [0069.574] GetCurrentObject (hdc=0x4501024b, type=0x1) returned 0x1b00017 [0069.574] GetCurrentObject (hdc=0x4501024b, type=0x2) returned 0x1900010 [0069.574] GetCurrentObject (hdc=0x4501024b, type=0x7) returned 0x6205007f [0069.574] GetCurrentObject (hdc=0x4501024b, type=0x6) returned 0x18a002e [0069.574] SaveDC (hdc=0x4501024b) returned 1 [0069.574] GetNearestColor (hdc=0x4501024b, color=0xa0) returned 0xa0 [0069.574] CreateSolidBrush (color=0xa0) returned 0x2b100860 [0069.574] FillRect (hDC=0x4501024b, lprc=0x14d098, hbr=0x2b100860) returned 1 [0069.574] DeleteObject (ho=0x2b100860) returned 1 [0069.574] RestoreDC (hdc=0x4501024b, nSavedDC=-1) returned 1 [0069.574] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0069.574] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0069.574] GetSystemMetrics (nIndex=42) returned 0 [0069.574] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d250, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0069.574] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d250) returned 0xc [0069.574] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d2d8 | out: lpRect=0x14d2d8) returned 1 [0069.574] GetCurrentObject (hdc=0x4501024b, type=0x1) returned 0x1b00017 [0069.574] GetCurrentObject (hdc=0x4501024b, type=0x2) returned 0x1900010 [0069.574] GetCurrentObject (hdc=0x4501024b, type=0x7) returned 0x6205007f [0069.575] GetCurrentObject (hdc=0x4501024b, type=0x6) returned 0x18a002e [0069.575] SaveDC (hdc=0x4501024b) returned 1 [0069.575] GetNearestColor (hdc=0x4501024b, color=0xa0) returned 0xa0 [0069.575] CreateSolidBrush (color=0xa0) returned 0x2c100860 [0069.575] FillRect (hDC=0x4501024b, lprc=0x14cfc8, hbr=0x2c100860) returned 1 [0069.575] DeleteObject (ho=0x2c100860) returned 1 [0069.575] RestoreDC (hdc=0x4501024b, nSavedDC=-1) returned 1 [0069.575] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0069.575] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0069.575] GetSystemMetrics (nIndex=42) returned 0 [0069.575] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d250, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0069.576] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d250) returned 0xc [0069.576] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020e, Msg=0x14, wParam=0x5010825, lParam=0x0) returned 0x1 [0069.576] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x138, wParam=0x5010825, lParam=0x1020e) returned 0x1100059 [0069.576] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10210, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0069.577] GetWindowPlacement (in: hWnd=0x10214, lpwndpl=0x14dfe8 | out: lpwndpl=0x14dfe8) returned 1 [0069.577] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x47, wParam=0x0, lParam=0x14e410) returned 0x0 [0069.577] GetClientRect (in: hWnd=0x10214, lpRect=0x14de80 | out: lpRect=0x14de80) returned 1 [0069.577] GetWindowRect (in: hWnd=0x10214, lpRect=0x14de80 | out: lpRect=0x14de80) returned 1 [0069.577] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0069.577] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0069.577] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0069.578] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x5, wParam=0x0, lParam=0xbd01b6) returned 0x0 [0069.578] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x3, wParam=0x0, lParam=0x15a01f5) returned 0x0 [0069.578] GetClientRect (in: hWnd=0x10214, lpRect=0x14df10 | out: lpRect=0x14df10) returned 1 [0069.578] GetWindowRect (in: hWnd=0x10214, lpRect=0x14df10 | out: lpRect=0x14df10) returned 1 [0069.578] GetFocus () returned 0x10214 [0069.578] GetFocus () returned 0x10214 [0069.578] SetFocus (hWnd=0x1021e) returned 0x10214 [0069.578] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x8, wParam=0x1021e, lParam=0x0) returned 0x0 [0069.578] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0069.578] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0069.579] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0069.579] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0x7, wParam=0x10214, lParam=0x0) returned 0x1 [0069.579] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0069.579] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0x282, wParam=0xa, lParam=0x0) returned 0x0 [0069.579] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0069.579] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0x282, wParam=0xf, lParam=0x600bd) returned 0x0 [0069.579] SetTextColor (hdc=0x5010830, color=0x0) returned 0x0 [0069.579] SetBkColor (hdc=0x5010830, color=0xffffff) returned 0xffffff [0069.579] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0069.579] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0 [0069.580] SendMessageW (hWnd=0x1021e, Msg=0x2111, wParam=0x100021e, lParam=0x1021e) returned 0x0 [0071.407] SendMessageW (hWnd=0x1021e, Msg=0xb0, wParam=0x14dda0, lParam=0x14dd40) returned 0x0 [0071.407] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0xb0, wParam=0x14dda0, lParam=0x14dd40) returned 0x0 [0071.407] GetKeyState (nVirtKey=1) returned 1 [0071.407] GetKeyState (nVirtKey=2) returned 0 [0071.407] GetKeyState (nVirtKey=4) returned 0 [0071.407] GetKeyState (nVirtKey=5) returned 0 [0071.407] GetKeyState (nVirtKey=6) returned 0 [0071.407] GetWindowTextLengthW (hWnd=0x1021e) returned 0 [0071.407] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x0 [0071.407] SendMessageW (hWnd=0x1021e, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0071.407] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0xb1, wParam=0x0, lParam=0x0) returned 0x1 [0071.407] SetTextColor (hdc=0x5010830, color=0x0) returned 0x0 [0071.407] SetBkColor (hdc=0x5010830, color=0xffffff) returned 0xffffff [0071.408] GetFocus () returned 0x1021e [0071.408] GetCapture () returned 0x0 [0071.408] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.408] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0071.408] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0071.408] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0071.408] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0071.409] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0071.409] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301a2, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0071.409] NtdllDefWindowProc_W (hWnd=0x40120, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0071.409] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0071.409] IsWindowUnicode (hWnd=0x10214) returned 1 [0071.409] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.409] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.409] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0071.409] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.409] GetMessageA (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.409] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.409] DispatchMessageA (lpMsg=0x14edb0) returned 0x0 [0071.409] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.409] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x28202f1) returned 0x1 [0071.409] IsWindowUnicode (hWnd=0x1020c) returned 1 [0071.409] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.409] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x28202f1) returned 0x1 [0071.409] SetCursor (hCursor=0x10003) returned 0x10003 [0071.409] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.410] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0071.410] GetKeyState (nVirtKey=1) returned 1 [0071.410] GetKeyState (nVirtKey=2) returned 0 [0071.410] GetKeyState (nVirtKey=4) returned 0 [0071.410] GetKeyState (nVirtKey=5) returned 0 [0071.410] GetKeyState (nVirtKey=6) returned 0 [0071.410] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.410] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x28202f1) returned 0x1 [0071.410] IsWindowUnicode (hWnd=0x1020c) returned 1 [0071.410] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.410] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x28202f1) returned 0x1 [0071.410] GetDlgItem (hDlg=0x401fa, nIDDlgItem=0) returned 0x0 [0071.410] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x210, wParam=0x201, lParam=0x1b5014a) returned 0x0 [0071.410] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x21, wParam=0x401fa, lParam=0x2010001) returned 0x1 [0071.410] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x21, wParam=0x401fa, lParam=0x2010001) returned 0x1 [0071.410] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x86, wParam=0x0, lParam=0x401fa) returned 0x1 [0071.410] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0071.411] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0071.411] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0071.411] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x46, wParam=0x0, lParam=0x14ec10) returned 0x0 [0071.412] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0071.412] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0071.412] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0071.412] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0071.413] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14e808 | out: lpwndpl=0x14e808) returned 1 [0071.413] GetClientRect (in: hWnd=0x401fa, lpRect=0x14e720 | out: lpRect=0x14e720) returned 1 [0071.413] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0071.413] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0071.413] GetSystemMetrics (nIndex=42) returned 0 [0071.413] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14e480, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0071.413] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14e480) returned 0xc [0071.413] GetClientRect (in: hWnd=0x401fa, lpRect=0x14e508 | out: lpRect=0x14e508) returned 1 [0071.413] GetCurrentObject (hdc=0x5010830, type=0x1) returned 0x1b00017 [0071.413] GetCurrentObject (hdc=0x5010830, type=0x2) returned 0x1900010 [0071.413] GetCurrentObject (hdc=0x5010830, type=0x7) returned 0x1050032 [0071.413] GetCurrentObject (hdc=0x5010830, type=0x6) returned 0x18a002e [0071.413] SaveDC (hdc=0x5010830) returned 1 [0071.413] GetNearestColor (hdc=0x5010830, color=0xa0) returned 0xa0 [0071.413] CreateSolidBrush (color=0xa0) returned 0x2d100860 [0071.413] FillRect (hDC=0x5010830, lprc=0x14e1f8, hbr=0x2d100860) returned 1 [0071.413] DeleteObject (ho=0x2d100860) returned 1 [0071.413] RestoreDC (hdc=0x5010830, nSavedDC=-1) returned 1 [0071.414] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301fc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0071.414] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301fc, Msg=0x14, wParam=0x5010825, lParam=0x0) returned 0x1 [0071.414] GetStockObject (i=5) returned 0x1900015 [0071.414] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0071.414] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201dc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0071.415] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10206, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0071.415] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10208, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0071.415] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0071.415] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x138, wParam=0x5010825, lParam=0x1020a) returned 0x1100059 [0071.421] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14dea8 | out: lpwndpl=0x14dea8) returned 1 [0071.421] GetClientRect (in: hWnd=0x401fa, lpRect=0x14ddc0 | out: lpRect=0x14ddc0) returned 1 [0071.421] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0071.421] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0071.421] GetSystemMetrics (nIndex=42) returned 0 [0071.421] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14db20, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0071.421] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14db20) returned 0xc [0071.421] GetClientRect (in: hWnd=0x401fa, lpRect=0x14dba8 | out: lpRect=0x14dba8) returned 1 [0071.421] GetCurrentObject (hdc=0x4601024b, type=0x1) returned 0x1b00017 [0071.421] GetCurrentObject (hdc=0x4601024b, type=0x2) returned 0x1900010 [0071.421] GetCurrentObject (hdc=0x4601024b, type=0x7) returned 0x6205007f [0071.421] GetCurrentObject (hdc=0x4601024b, type=0x6) returned 0x18a002e [0071.422] SaveDC (hdc=0x4601024b) returned 1 [0071.422] GetNearestColor (hdc=0x4601024b, color=0xa0) returned 0xa0 [0071.422] CreateSolidBrush (color=0xa0) returned 0x2e100860 [0071.422] FillRect (hDC=0x4601024b, lprc=0x14d898, hbr=0x2e100860) returned 1 [0071.422] DeleteObject (ho=0x2e100860) returned 1 [0071.422] RestoreDC (hdc=0x4601024b, nSavedDC=-1) returned 1 [0071.422] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0071.422] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0071.422] GetSystemMetrics (nIndex=42) returned 0 [0071.422] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14da50, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0071.422] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14da50) returned 0xc [0071.422] GetClientRect (in: hWnd=0x401fa, lpRect=0x14dad8 | out: lpRect=0x14dad8) returned 1 [0071.422] GetCurrentObject (hdc=0x4601024b, type=0x1) returned 0x1b00017 [0071.422] GetCurrentObject (hdc=0x4601024b, type=0x2) returned 0x1900010 [0071.422] GetCurrentObject (hdc=0x4601024b, type=0x7) returned 0x6205007f [0071.422] GetCurrentObject (hdc=0x4601024b, type=0x6) returned 0x18a002e [0071.422] SaveDC (hdc=0x4601024b) returned 1 [0071.422] GetNearestColor (hdc=0x4601024b, color=0xa0) returned 0xa0 [0071.422] CreateSolidBrush (color=0xa0) returned 0x2f100860 [0071.422] FillRect (hDC=0x4601024b, lprc=0x14d7c8, hbr=0x2f100860) returned 1 [0071.422] DeleteObject (ho=0x2f100860) returned 1 [0071.422] RestoreDC (hdc=0x4601024b, nSavedDC=-1) returned 1 [0071.423] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0071.423] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0071.423] GetSystemMetrics (nIndex=42) returned 0 [0071.423] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14da50, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0071.423] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14da50) returned 0xc [0071.423] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020a, Msg=0x14, wParam=0x5010825, lParam=0x0) returned 0x1 [0071.423] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0071.423] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x14, wParam=0xb010256, lParam=0x0) returned 0x1 [0071.423] GetStockObject (i=5) returned 0x1900015 [0071.423] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0071.424] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x138, wParam=0x5010825, lParam=0x1020e) returned 0x1100059 [0071.424] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14dea8 | out: lpwndpl=0x14dea8) returned 1 [0071.424] GetClientRect (in: hWnd=0x401fa, lpRect=0x14ddc0 | out: lpRect=0x14ddc0) returned 1 [0071.424] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0071.424] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0071.424] GetSystemMetrics (nIndex=42) returned 0 [0071.424] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14db20, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0071.424] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14db20) returned 0xc [0071.424] GetClientRect (in: hWnd=0x401fa, lpRect=0x14dba8 | out: lpRect=0x14dba8) returned 1 [0071.424] GetCurrentObject (hdc=0x4701024b, type=0x1) returned 0x1b00017 [0071.424] GetCurrentObject (hdc=0x4701024b, type=0x2) returned 0x1900010 [0071.424] GetCurrentObject (hdc=0x4701024b, type=0x7) returned 0x6205007f [0071.424] GetCurrentObject (hdc=0x4701024b, type=0x6) returned 0x18a002e [0071.424] SaveDC (hdc=0x4701024b) returned 1 [0071.424] GetNearestColor (hdc=0x4701024b, color=0xa0) returned 0xa0 [0071.424] CreateSolidBrush (color=0xa0) returned 0x30100860 [0071.424] FillRect (hDC=0x4701024b, lprc=0x14d898, hbr=0x30100860) returned 1 [0071.424] DeleteObject (ho=0x30100860) returned 1 [0071.424] RestoreDC (hdc=0x4701024b, nSavedDC=-1) returned 1 [0071.425] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0071.425] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0071.425] GetSystemMetrics (nIndex=42) returned 0 [0071.425] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14da50, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0071.425] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14da50) returned 0xc [0071.425] GetClientRect (in: hWnd=0x401fa, lpRect=0x14dad8 | out: lpRect=0x14dad8) returned 1 [0071.425] GetCurrentObject (hdc=0x4701024b, type=0x1) returned 0x1b00017 [0071.425] GetCurrentObject (hdc=0x4701024b, type=0x2) returned 0x1900010 [0071.425] GetCurrentObject (hdc=0x4701024b, type=0x7) returned 0x6205007f [0071.425] GetCurrentObject (hdc=0x4701024b, type=0x6) returned 0x18a002e [0071.425] SaveDC (hdc=0x4701024b) returned 1 [0071.425] GetNearestColor (hdc=0x4701024b, color=0xa0) returned 0xa0 [0071.425] CreateSolidBrush (color=0xa0) returned 0x31100860 [0071.425] FillRect (hDC=0x4701024b, lprc=0x14d7c8, hbr=0x31100860) returned 1 [0071.425] DeleteObject (ho=0x31100860) returned 1 [0071.425] RestoreDC (hdc=0x4701024b, nSavedDC=-1) returned 1 [0071.425] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0071.425] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0071.425] GetSystemMetrics (nIndex=42) returned 0 [0071.425] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14da50, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0071.425] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14da50) returned 0xc [0071.426] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020e, Msg=0x14, wParam=0x5010825, lParam=0x0) returned 0x1 [0071.426] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x138, wParam=0x5010825, lParam=0x1020e) returned 0x1100059 [0071.426] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10210, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0071.427] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0071.427] SetTextColor (hdc=0x5010825, color=0x0) returned 0x0 [0071.427] SetBkColor (hdc=0x5010825, color=0xffffff) returned 0xffffff [0071.427] GetWindowPlacement (in: hWnd=0x10214, lpwndpl=0x14dea8 | out: lpwndpl=0x14dea8) returned 1 [0071.427] GetClientRect (in: hWnd=0x10214, lpRect=0x14ddc0 | out: lpRect=0x14ddc0) returned 1 [0071.427] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0071.427] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0071.427] GetSystemMetrics (nIndex=42) returned 0 [0071.427] GetWindowTextW (in: hWnd=0x10214, lpString=0x14db20, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0071.427] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14db20) returned 0xa [0071.427] GetClientRect (in: hWnd=0x10214, lpRect=0x14dba8 | out: lpRect=0x14dba8) returned 1 [0071.427] GetCurrentObject (hdc=0xffffffffd4010890, type=0x1) returned 0x1b00017 [0071.427] GetCurrentObject (hdc=0xffffffffd4010890, type=0x2) returned 0x1900010 [0071.427] GetCurrentObject (hdc=0xffffffffd4010890, type=0x7) returned 0x55050870 [0071.427] GetCurrentObject (hdc=0xffffffffd4010890, type=0x6) returned 0x18a002e [0071.427] SaveDC (hdc=0xffffffffd4010890) returned 1 [0071.428] GetNearestColor (hdc=0xffffffffd4010890, color=0xa0) returned 0xa0 [0071.428] CreateSolidBrush (color=0xa0) returned 0x32100860 [0071.428] FillRect (hDC=0xffffffffd4010890, lprc=0x14d898, hbr=0x32100860) returned 1 [0071.428] DeleteObject (ho=0x32100860) returned 1 [0071.428] RestoreDC (hdc=0xffffffffd4010890, nSavedDC=-1) returned 1 [0071.428] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0071.428] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0071.428] GetSystemMetrics (nIndex=42) returned 0 [0071.428] GetWindowTextW (in: hWnd=0x10214, lpString=0x14da50, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0071.428] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14da50) returned 0xa [0071.428] GetClientRect (in: hWnd=0x10214, lpRect=0x14dad8 | out: lpRect=0x14dad8) returned 1 [0071.428] GetCurrentObject (hdc=0xffffffffd4010890, type=0x1) returned 0x1b00017 [0071.428] GetCurrentObject (hdc=0xffffffffd4010890, type=0x2) returned 0x1900010 [0071.428] GetCurrentObject (hdc=0xffffffffd4010890, type=0x7) returned 0x55050870 [0071.428] GetCurrentObject (hdc=0xffffffffd4010890, type=0x6) returned 0x18a002e [0071.428] SaveDC (hdc=0xffffffffd4010890) returned 1 [0071.428] GetNearestColor (hdc=0xffffffffd4010890, color=0xa0) returned 0xa0 [0071.428] CreateSolidBrush (color=0xa0) returned 0x33100860 [0071.428] FillRect (hDC=0xffffffffd4010890, lprc=0x14d7c8, hbr=0x33100860) returned 1 [0071.429] DeleteObject (ho=0x33100860) returned 1 [0071.429] RestoreDC (hdc=0xffffffffd4010890, nSavedDC=-1) returned 1 [0071.429] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0071.429] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0071.429] GetSystemMetrics (nIndex=42) returned 0 [0071.429] GetWindowTextW (in: hWnd=0x10214, lpString=0x14da50, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0071.429] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14da50) returned 0xa [0071.429] GetWindowPlacement (in: hWnd=0x10214, lpwndpl=0x14dea8 | out: lpwndpl=0x14dea8) returned 1 [0071.429] GetClientRect (in: hWnd=0x10214, lpRect=0x14ddc0 | out: lpRect=0x14ddc0) returned 1 [0071.429] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0071.429] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0071.429] GetSystemMetrics (nIndex=42) returned 0 [0071.429] GetWindowTextW (in: hWnd=0x10214, lpString=0x14db20, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0071.429] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14db20) returned 0xa [0071.429] GetClientRect (in: hWnd=0x10214, lpRect=0x14dba8 | out: lpRect=0x14dba8) returned 1 [0071.429] GetCurrentObject (hdc=0x4801024b, type=0x1) returned 0x1b00017 [0071.429] GetCurrentObject (hdc=0x4801024b, type=0x2) returned 0x1900010 [0071.429] GetCurrentObject (hdc=0x4801024b, type=0x7) returned 0x6205007f [0071.429] GetCurrentObject (hdc=0x4801024b, type=0x6) returned 0x18a002e [0071.429] SaveDC (hdc=0x4801024b) returned 1 [0071.429] GetNearestColor (hdc=0x4801024b, color=0xa0) returned 0xa0 [0071.430] CreateSolidBrush (color=0xa0) returned 0x34100860 [0071.430] FillRect (hDC=0x4801024b, lprc=0x14d898, hbr=0x34100860) returned 1 [0071.430] DeleteObject (ho=0x34100860) returned 1 [0071.430] RestoreDC (hdc=0x4801024b, nSavedDC=-1) returned 1 [0071.430] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0071.430] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0071.430] GetSystemMetrics (nIndex=42) returned 0 [0071.430] GetWindowTextW (in: hWnd=0x10214, lpString=0x14da50, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0071.430] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14da50) returned 0xa [0071.430] GetClientRect (in: hWnd=0x10214, lpRect=0x14dad8 | out: lpRect=0x14dad8) returned 1 [0071.430] GetCurrentObject (hdc=0x4801024b, type=0x1) returned 0x1b00017 [0071.430] GetCurrentObject (hdc=0x4801024b, type=0x2) returned 0x1900010 [0071.430] GetCurrentObject (hdc=0x4801024b, type=0x7) returned 0x6205007f [0071.430] GetCurrentObject (hdc=0x4801024b, type=0x6) returned 0x18a002e [0071.430] SaveDC (hdc=0x4801024b) returned 1 [0071.430] GetNearestColor (hdc=0x4801024b, color=0xa0) returned 0xa0 [0071.430] CreateSolidBrush (color=0xa0) returned 0x35100860 [0071.430] FillRect (hDC=0x4801024b, lprc=0x14d7c8, hbr=0x35100860) returned 1 [0071.430] DeleteObject (ho=0x35100860) returned 1 [0071.430] RestoreDC (hdc=0x4801024b, nSavedDC=-1) returned 1 [0071.431] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0071.431] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0071.431] GetSystemMetrics (nIndex=42) returned 0 [0071.431] GetWindowTextW (in: hWnd=0x10214, lpString=0x14da50, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0071.431] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14da50) returned 0xa [0071.432] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0x14, wParam=0x5010825, lParam=0x0) returned 0x1 [0071.432] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14e7e8 | out: lpwndpl=0x14e7e8) returned 1 [0071.432] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x47, wParam=0x0, lParam=0x14ec10) returned 0x0 [0071.432] GetClientRect (in: hWnd=0x401fa, lpRect=0x14e680 | out: lpRect=0x14e680) returned 1 [0071.432] GetWindowRect (in: hWnd=0x401fa, lpRect=0x14e680 | out: lpRect=0x14e680) returned 1 [0071.432] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0071.432] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0071.432] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0071.433] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x86, wParam=0x1, lParam=0x10214) returned 0x1 [0071.433] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0071.433] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0071.433] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0071.434] GetFocus () returned 0x1021e [0071.434] SetFocus (hWnd=0x1020c) returned 0x1021e [0071.434] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0x8, wParam=0x1020c, lParam=0x0) returned 0x1 [0071.434] SendMessageW (hWnd=0x1021e, Msg=0x2111, wParam=0x200021e, lParam=0x1021e) returned 0x0 [0071.435] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0071.435] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0071.435] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0071.435] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x282, wParam=0xb, lParam=0x0) returned 0x0 [0071.435] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0071.435] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x282, wParam=0xf, lParam=0x600bd) returned 0x0 [0071.435] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0071.435] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0071.435] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0071.435] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0071.435] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0071.435] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x7, wParam=0x1021e, lParam=0x0) returned 0x0 [0071.435] GetStockObject (i=5) returned 0x1900015 [0071.436] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0071.436] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0xd, wParam=0x6, lParam=0xa84440) returned 0x5 [0071.436] GetDlgItem (hDlg=0x401fa, nIDDlgItem=66060) returned 0x1020c [0071.436] SendMessageW (hWnd=0x1020c, Msg=0x202b, wParam=0x1020c, lParam=0x14dc40) returned 0x0 [0071.436] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x202b, wParam=0x1020c, lParam=0x14dc40) returned 0x0 [0071.436] InvalidateRect (hWnd=0x1020c, lpRect=0x0, bErase=0) returned 1 [0071.437] SetCursor (hCursor=0x10003) returned 0x10003 [0071.437] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.437] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0071.437] GetKeyState (nVirtKey=1) returned -128 [0071.437] GetKeyState (nVirtKey=2) returned 0 [0071.437] GetKeyState (nVirtKey=4) returned 0 [0071.437] GetKeyState (nVirtKey=5) returned 0 [0071.437] GetKeyState (nVirtKey=6) returned 0 [0071.437] IsWindowVisible (hWnd=0x1020c) returned 1 [0071.437] IsWindowEnabled (hWnd=0x1020c) returned 1 [0071.437] SetFocus (hWnd=0x1020c) returned 0x1020c [0071.437] GetFocus () returned 0x1020c [0071.437] GetFocus () returned 0x1020c [0071.437] GetFocus () returned 0x1020c [0071.437] GetKeyState (nVirtKey=1) returned -128 [0071.437] GetKeyState (nVirtKey=2) returned 0 [0071.437] GetKeyState (nVirtKey=4) returned 0 [0071.437] GetKeyState (nVirtKey=5) returned 0 [0071.437] GetKeyState (nVirtKey=6) returned 0 [0071.437] GetCapture () returned 0x0 [0071.437] SetCapture (hWnd=0x1020c) returned 0x0 [0071.437] GetKeyState (nVirtKey=1) returned -128 [0071.437] GetKeyState (nVirtKey=2) returned 0 [0071.437] GetKeyState (nVirtKey=4) returned 0 [0071.437] GetKeyState (nVirtKey=5) returned 0 [0071.437] GetKeyState (nVirtKey=6) returned 0 [0071.437] NotifyWinEvent (event=0x800a, hwnd=0x1020c, idObject=-4, idChild=0) [0071.437] InvalidateRect (hWnd=0x1020c, lpRect=0x14e6f0, bErase=0) returned 1 [0071.437] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.437] GetMessageA (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.437] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.438] DispatchMessageA (lpMsg=0x14edb0) returned 0x0 [0071.438] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.438] GetMessageA (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.438] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.438] DispatchMessageA (lpMsg=0x14edb0) returned 0x0 [0071.438] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.438] IsWindowUnicode (hWnd=0x1020c) returned 1 [0071.438] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.438] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.438] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0071.438] MapWindowPoints (in: hWndFrom=0x1020c, hWndTo=0x0, lpPoints=0x2160940, cPoints=0x1 | out: lpPoints=0x2160940) returned 41353803 [0071.438] NotifyWinEvent (event=0x800a, hwnd=0x1020c, idObject=-4, idChild=0) [0071.438] InvalidateRect (hWnd=0x1020c, lpRect=0x14e680, bErase=0) returned 1 [0071.438] UpdateWindow (hWnd=0x1020c) returned 1 [0071.438] BeginPaint (in: hWnd=0x1020c, lpPaint=0x14ddf8 | out: lpPaint=0x14ddf8) returned 0x5010830 [0071.438] SelectPalette (hdc=0x5010830, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0071.438] CreateCompatibleDC (hdc=0x5010830) returned 0xffffffffec01025c [0071.438] SelectObject (hdc=0xffffffffec01025c, h=0x28050250) returned 0x185000f [0071.438] GdipCreateFromHDC (hdc=0xffffffffec01025c, graphics=0x14dd78) returned 0x0 [0071.438] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0071.438] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=408, height=23, combineMode=0x0) returned 0x0 [0071.438] GdipCreateMatrix (matrix=0x14dda0) returned 0x0 [0071.438] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0071.439] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14de08) returned 0x0 [0071.439] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0071.439] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0071.439] LocalFree (hMem=0xa931f0) returned 0x0 [0071.439] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0071.439] GdipCreateRegion (region=0x14dda0) returned 0x0 [0071.439] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0071.439] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14de00) returned 0x0 [0071.439] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14dea0) returned 0x0 [0071.439] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffdaa0dbd) returned 0x0 [0071.439] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0071.439] GdipGetDC (graphics=0x1afd81d0, hdc=0x14db18) returned 0x0 [0071.439] GetCurrentObject (hdc=0xffffffffec01025c, type=0x1) returned 0x1b00017 [0071.439] GetCurrentObject (hdc=0xffffffffec01025c, type=0x2) returned 0x1900010 [0071.439] GetCurrentObject (hdc=0xffffffffec01025c, type=0x7) returned 0x28050250 [0071.439] GetCurrentObject (hdc=0xffffffffec01025c, type=0x6) returned 0x18a002e [0071.439] SaveDC (hdc=0xffffffffec01025c) returned 1 [0071.439] GetNearestColor (hdc=0xffffffffec01025c, color=0xa0) returned 0xa0 [0071.439] GetNearestColor (hdc=0xffffffffec01025c, color=0x35) returned 0x35 [0071.440] GetNearestColor (hdc=0xffffffffec01025c, color=0x0) returned 0x0 [0071.440] GetNearestColor (hdc=0xffffffffec01025c, color=0x4848e5) returned 0x4848e5 [0071.440] GetNearestColor (hdc=0xffffffffec01025c, color=0x0) returned 0x0 [0071.440] GetNearestColor (hdc=0xffffffffec01025c, color=0x5151ff) returned 0x5151ff [0071.440] GetNearestColor (hdc=0xffffffffec01025c, color=0x4848e5) returned 0x4848e5 [0071.440] GetNearestColor (hdc=0xffffffffec01025c, color=0xc0) returned 0xc0 [0071.440] GetNearestColor (hdc=0xffffffffec01025c, color=0x0) returned 0x0 [0071.440] RestoreDC (hdc=0xffffffffec01025c, nSavedDC=-1) returned 1 [0071.440] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffec01025c) returned 0x0 [0071.440] IsAppThemed () returned 0x1 [0071.440] GetThemeAppProperties () returned 0x3 [0071.440] GetThemeAppProperties () returned 0x3 [0071.440] IsAppThemed () returned 0x1 [0071.440] GetThemeAppProperties () returned 0x3 [0071.440] GetThemeAppProperties () returned 0x3 [0071.440] SelectObject (hdc=0x8010893, h=0x120a086d) returned 0xffffffff8c0a086c [0071.440] DrawTextExW (in: hdc=0x8010893, lpchText="Check", cchText=5, lprc=0x14d788, format=0x102415, lpdtp=0x2161468 | out: lpchText="Check", lprc=0x14d788) returned 13 [0071.441] IsAppThemed () returned 0x1 [0071.441] GetThemeAppProperties () returned 0x3 [0071.441] GetThemeAppProperties () returned 0x3 [0071.441] IsAppThemed () returned 0x1 [0071.441] GetThemeAppProperties () returned 0x3 [0071.441] GetThemeAppProperties () returned 0x3 [0071.441] IsAppThemed () returned 0x1 [0071.441] GetThemeAppProperties () returned 0x3 [0071.441] GetThemeAppProperties () returned 0x3 [0071.441] IsAppThemed () returned 0x1 [0071.441] GetThemeAppProperties () returned 0x3 [0071.441] GetThemeAppProperties () returned 0x3 [0071.441] IsThemePartDefined () returned 0x1 [0071.441] IsAppThemed () returned 0x1 [0071.441] GetThemeAppProperties () returned 0x3 [0071.441] GetThemeAppProperties () returned 0x3 [0071.441] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0071.441] IsAppThemed () returned 0x1 [0071.441] GetThemeAppProperties () returned 0x3 [0071.441] GetThemeAppProperties () returned 0x3 [0071.441] IsAppThemed () returned 0x1 [0071.441] GetThemeAppProperties () returned 0x3 [0071.441] GetThemeAppProperties () returned 0x3 [0071.441] IsThemePartDefined () returned 0x1 [0071.441] GdipCreateRegion (region=0x14d880) returned 0x0 [0071.441] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0071.441] GdipCreateMatrix (matrix=0x14d880) returned 0x0 [0071.441] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0071.441] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14d8e8) returned 0x0 [0071.441] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0071.442] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0071.442] LocalFree (hMem=0xa931f0) returned 0x0 [0071.442] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0071.442] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0071.442] LocalFree (hMem=0xa931f0) returned 0x0 [0071.442] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0071.442] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d950) returned 0x0 [0071.442] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d910) returned 0x0 [0071.442] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14d910) returned 0x0 [0071.442] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0071.442] GdipGetDC (graphics=0x1afd81d0, hdc=0x14d958) returned 0x0 [0071.442] GetCurrentObject (hdc=0xffffffffec01025c, type=0x1) returned 0x1b00017 [0071.442] GetCurrentObject (hdc=0xffffffffec01025c, type=0x2) returned 0x1900010 [0071.442] GetCurrentObject (hdc=0xffffffffec01025c, type=0x7) returned 0x28050250 [0071.442] GetCurrentObject (hdc=0xffffffffec01025c, type=0x6) returned 0x18a002e [0071.442] SaveDC (hdc=0xffffffffec01025c) returned 1 [0071.442] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x32040864 [0071.442] GetClipRgn (hdc=0xffffffffec01025c, hrgn=0x32040864) returned 0 [0071.443] SelectClipRgn (hdc=0xffffffffec01025c, hrgn=0x64040763) returned 2 [0071.443] DeleteObject (ho=0x32040864) returned 1 [0071.443] DeleteObject (ho=0x64040763) returned 1 [0071.443] OffsetViewportOrgEx (in: hdc=0xffffffffec01025c, x=0, y=0, lppt=0x2161e50 | out: lppt=0x2161e50) returned 1 [0071.443] DrawThemeParentBackground () returned 0x0 [0071.443] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14d508 | out: lpwndpl=0x14d508) returned 1 [0071.443] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d420 | out: lpRect=0x14d420) returned 1 [0071.443] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0071.443] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0071.443] GetSystemMetrics (nIndex=42) returned 0 [0071.443] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d180, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0071.443] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d180) returned 0xc [0071.443] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d208 | out: lpRect=0x14d208) returned 1 [0071.443] GetCurrentObject (hdc=0xffffffffec01025c, type=0x1) returned 0x1b00017 [0071.443] GetCurrentObject (hdc=0xffffffffec01025c, type=0x2) returned 0x1900010 [0071.443] GetCurrentObject (hdc=0xffffffffec01025c, type=0x7) returned 0x28050250 [0071.443] GetCurrentObject (hdc=0xffffffffec01025c, type=0x6) returned 0x18a002e [0071.443] SaveDC (hdc=0xffffffffec01025c) returned 2 [0071.443] GetNearestColor (hdc=0xffffffffec01025c, color=0xa0) returned 0xa0 [0071.444] CreateSolidBrush (color=0xa0) returned 0x36100860 [0071.444] FillRect (hDC=0xffffffffec01025c, lprc=0x14cef8, hbr=0x36100860) returned 1 [0071.444] DeleteObject (ho=0x36100860) returned 1 [0071.444] RestoreDC (hdc=0xffffffffec01025c, nSavedDC=-1) returned 1 [0071.444] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0071.444] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0071.444] GetSystemMetrics (nIndex=42) returned 0 [0071.444] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d0b0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0071.444] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d0b0) returned 0xc [0071.444] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d138 | out: lpRect=0x14d138) returned 1 [0071.444] GetCurrentObject (hdc=0xffffffffec01025c, type=0x1) returned 0x1b00017 [0071.444] GetCurrentObject (hdc=0xffffffffec01025c, type=0x2) returned 0x1900010 [0071.444] GetCurrentObject (hdc=0xffffffffec01025c, type=0x7) returned 0x28050250 [0071.444] GetCurrentObject (hdc=0xffffffffec01025c, type=0x6) returned 0x18a002e [0071.444] SaveDC (hdc=0xffffffffec01025c) returned 2 [0071.444] GetNearestColor (hdc=0xffffffffec01025c, color=0xa0) returned 0xa0 [0071.444] CreateSolidBrush (color=0xa0) returned 0x37100860 [0071.444] FillRect (hDC=0xffffffffec01025c, lprc=0x14ce28, hbr=0x37100860) returned 1 [0071.445] DeleteObject (ho=0x37100860) returned 1 [0071.445] RestoreDC (hdc=0xffffffffec01025c, nSavedDC=-1) returned 1 [0071.445] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0071.445] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0071.445] GetSystemMetrics (nIndex=42) returned 0 [0071.445] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d0b0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0071.445] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d0b0) returned 0xc [0071.445] RestoreDC (hdc=0xffffffffec01025c, nSavedDC=-1) returned 1 [0071.445] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffec01025c) returned 0x0 [0071.445] IsAppThemed () returned 0x1 [0071.445] GetThemeAppProperties () returned 0x3 [0071.445] GetThemeAppProperties () returned 0x3 [0071.445] IsAppThemed () returned 0x1 [0071.445] GetThemeAppProperties () returned 0x3 [0071.445] GetThemeAppProperties () returned 0x3 [0071.445] IsThemePartDefined () returned 0x1 [0071.445] GdipCreateRegion (region=0x14d820) returned 0x0 [0071.445] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0071.445] GdipCreateMatrix (matrix=0x14d820) returned 0x0 [0071.445] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0071.445] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14d888) returned 0x0 [0071.445] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0071.445] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0071.445] LocalFree (hMem=0xa931f0) returned 0x0 [0071.445] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0071.445] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0071.446] LocalFree (hMem=0xa931f0) returned 0x0 [0071.446] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0071.446] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d8f0) returned 0x0 [0071.446] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d8b0) returned 0x0 [0071.446] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14d8b0) returned 0x0 [0071.446] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0071.446] GdipGetDC (graphics=0x1afd81d0, hdc=0x14d8f8) returned 0x0 [0071.446] GetCurrentObject (hdc=0xffffffffec01025c, type=0x1) returned 0x1b00017 [0071.446] GetCurrentObject (hdc=0xffffffffec01025c, type=0x2) returned 0x1900010 [0071.446] GetCurrentObject (hdc=0xffffffffec01025c, type=0x7) returned 0x28050250 [0071.446] GetCurrentObject (hdc=0xffffffffec01025c, type=0x6) returned 0x18a002e [0071.446] SaveDC (hdc=0xffffffffec01025c) returned 1 [0071.446] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x65040763 [0071.446] GetClipRgn (hdc=0xffffffffec01025c, hrgn=0x65040763) returned 0 [0071.446] SelectClipRgn (hdc=0xffffffffec01025c, hrgn=0x34040864) returned 2 [0071.446] DeleteObject (ho=0x65040763) returned 1 [0071.446] DeleteObject (ho=0x34040864) returned 1 [0071.446] OffsetViewportOrgEx (in: hdc=0xffffffffec01025c, x=0, y=0, lppt=0x2162c58 | out: lppt=0x2162c58) returned 1 [0071.446] IsAppThemed () returned 0x1 [0071.446] GetThemeAppProperties () returned 0x3 [0071.446] GetThemeAppProperties () returned 0x3 [0071.446] DrawThemeBackground () returned 0x0 [0071.446] RestoreDC (hdc=0xffffffffec01025c, nSavedDC=-1) returned 1 [0071.446] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffec01025c) returned 0x0 [0071.446] GdipCreateRegion (region=0x14d810) returned 0x0 [0071.447] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0071.447] GdipCreateMatrix (matrix=0x14d810) returned 0x0 [0071.447] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0071.447] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14d878) returned 0x0 [0071.447] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0071.447] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0071.448] LocalFree (hMem=0xa931f0) returned 0x0 [0071.448] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0071.448] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0071.448] LocalFree (hMem=0xa931f0) returned 0x0 [0071.448] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0071.448] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d8e0) returned 0x0 [0071.448] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d8a0) returned 0x0 [0071.448] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14d8a0) returned 0x0 [0071.448] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0071.448] GdipGetDC (graphics=0x1afd81d0, hdc=0x14d8e8) returned 0x0 [0071.448] GetCurrentObject (hdc=0xffffffffec01025c, type=0x1) returned 0x1b00017 [0071.448] GetCurrentObject (hdc=0xffffffffec01025c, type=0x2) returned 0x1900010 [0071.448] GetCurrentObject (hdc=0xffffffffec01025c, type=0x7) returned 0x28050250 [0071.448] GetCurrentObject (hdc=0xffffffffec01025c, type=0x6) returned 0x18a002e [0071.449] SaveDC (hdc=0xffffffffec01025c) returned 1 [0071.449] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x35040864 [0071.449] GetClipRgn (hdc=0xffffffffec01025c, hrgn=0x35040864) returned 0 [0071.449] SelectClipRgn (hdc=0xffffffffec01025c, hrgn=0x66040763) returned 2 [0071.449] DeleteObject (ho=0x35040864) returned 1 [0071.449] DeleteObject (ho=0x66040763) returned 1 [0071.449] OffsetViewportOrgEx (in: hdc=0xffffffffec01025c, x=0, y=0, lppt=0x2163130 | out: lppt=0x2163130) returned 1 [0071.449] IsAppThemed () returned 0x1 [0071.449] GetThemeAppProperties () returned 0x3 [0071.449] GetThemeAppProperties () returned 0x3 [0071.449] GetThemeBackgroundContentRect () returned 0x0 [0071.449] RestoreDC (hdc=0xffffffffec01025c, nSavedDC=-1) returned 1 [0071.449] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffec01025c) returned 0x0 [0071.449] IsAppThemed () returned 0x1 [0071.449] GetThemeAppProperties () returned 0x3 [0071.449] GetThemeAppProperties () returned 0x3 [0071.449] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14dac8) returned 0x0 [0071.449] GdipGetDC (graphics=0x1afd81d0, hdc=0x14daa8) returned 0x0 [0071.449] GetCurrentObject (hdc=0xffffffffec01025c, type=0x1) returned 0x1b00017 [0071.449] GetCurrentObject (hdc=0xffffffffec01025c, type=0x2) returned 0x1900010 [0071.449] GetCurrentObject (hdc=0xffffffffec01025c, type=0x7) returned 0x28050250 [0071.449] GetCurrentObject (hdc=0xffffffffec01025c, type=0x6) returned 0x18a002e [0071.450] SaveDC (hdc=0xffffffffec01025c) returned 1 [0071.450] GetTextAlign (hdc=0xffffffffec01025c) returned 0x0 [0071.450] GetTextColor (hdc=0xffffffffec01025c) returned 0x0 [0071.450] GetCurrentObject (hdc=0xffffffffec01025c, type=0x6) returned 0x18a002e [0071.450] GetObjectW (in: h=0x18a002e, c=92, pv=0x14d5e0 | out: pv=0x14d5e0) returned 92 [0071.450] SelectObject (hdc=0xffffffffec01025c, h=0x120a086d) returned 0x18a002e [0071.450] GetBkMode (hdc=0xffffffffec01025c) returned 2 [0071.450] SetBkMode (hdc=0xffffffffec01025c, mode=1) returned 2 [0071.450] DrawTextExW (in: hdc=0xffffffffec01025c, lpchText="Check", cchText=5, lprc=0x14d820, format=0x102415, lpdtp=0x2163710 | out: lpchText="Check", lprc=0x14d820) returned 13 [0071.450] DrawTextExW (in: hdc=0xffffffffec01025c, lpchText="Check", cchText=5, lprc=0x14da38, format=0x102015, lpdtp=0x2163710 | out: lpchText="Check", lprc=0x14da38) returned 13 [0071.450] RestoreDC (hdc=0xffffffffec01025c, nSavedDC=-1) returned 1 [0071.450] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffec01025c) returned 0x0 [0071.450] GetFocus () returned 0x1020c [0071.450] IsAppThemed () returned 0x1 [0071.450] GetThemeAppProperties () returned 0x3 [0071.450] GetThemeAppProperties () returned 0x3 [0071.450] GdipGetDC (graphics=0x1afd81d0, hdc=0x14ddb8) returned 0x0 [0071.451] BitBlt (hdc=0x5010830, x=0, y=0, cx=408, cy=23, hdcSrc=0xffffffffec01025c, x1=0, y1=0, rop=0xcc0020) returned 1 [0071.451] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffec01025c) returned 0x0 [0071.451] SelectPalette (hdc=0x5010830, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0071.451] SelectObject (hdc=0xffffffffec01025c, h=0x185000f) returned 0x28050250 [0071.451] DeleteDC (hdc=0xffffffffec01025c) returned 1 [0071.451] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0071.451] EndPaint (hWnd=0x1020c, lpPaint=0x14dd98) returned 1 [0071.451] MapWindowPoints (in: hWndFrom=0x1020c, hWndTo=0x0, lpPoints=0x2163878, cPoints=0x1 | out: lpPoints=0x2163878) returned 41353803 [0071.451] WindowFromPoint (Point=0x282000002f1) returned 0x1020c [0071.451] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x28202f1) returned 0x1 [0071.451] NotifyWinEvent (event=0x800a, hwnd=0x1020c, idObject=-4, idChild=0) [0071.451] NotifyWinEvent (event=0x800c, hwnd=0x1020c, idObject=-4, idChild=0) [0071.451] SetWindowPos (hWnd=0x10214, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0071.452] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x46, wParam=0x0, lParam=0x14e450) returned 0x0 [0071.452] GetCapture () returned 0x1020c [0071.452] ReleaseCapture () returned 1 [0071.452] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0071.452] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.452] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x28202f1) returned 0x1 [0071.452] IsWindowUnicode (hWnd=0x1020c) returned 1 [0071.452] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.452] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x28202f1) returned 0x1 [0071.452] SetCursor (hCursor=0x10003) returned 0x10003 [0071.452] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.452] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0071.452] GetKeyState (nVirtKey=1) returned 0 [0071.452] GetKeyState (nVirtKey=2) returned 0 [0071.452] GetKeyState (nVirtKey=4) returned 0 [0071.452] GetKeyState (nVirtKey=5) returned 0 [0071.452] GetKeyState (nVirtKey=6) returned 0 [0071.452] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.452] IsWindowUnicode (hWnd=0x401fa) returned 1 [0071.452] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.453] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.453] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0071.453] BeginPaint (in: hWnd=0x401fa, lpPaint=0x14e4e8 | out: lpPaint=0x14e4e8) returned 0x5010825 [0071.453] SelectPalette (hdc=0x5010825, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0071.453] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0071.453] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0071.453] GetSystemMetrics (nIndex=42) returned 0 [0071.453] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14e380, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0071.453] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14e380) returned 0xc [0071.453] SelectPalette (hdc=0x5010825, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0071.453] EndPaint (hWnd=0x401fa, lpPaint=0x14e488) returned 1 [0071.453] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.453] IsWindowUnicode (hWnd=0x301fc) returned 1 [0071.453] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.453] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.453] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0071.453] BeginPaint (in: hWnd=0x301fc, lpPaint=0x14e478 | out: lpPaint=0x14e478) returned 0x5010830 [0071.453] SelectPalette (hdc=0x5010830, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0071.453] CreateCompatibleDC (hdc=0x5010830) returned 0xffffffffef01025c [0071.454] SelectObject (hdc=0xffffffffef01025c, h=0x28050250) returned 0x185000f [0071.454] GdipCreateFromHDC (hdc=0xffffffffef01025c, graphics=0x14e3f8) returned 0x0 [0071.454] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0071.454] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=123, height=23, combineMode=0x0) returned 0x0 [0071.454] GdipCreateMatrix (matrix=0x14e420) returned 0x0 [0071.454] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0071.454] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14e488) returned 0x0 [0071.454] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0071.454] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0071.454] LocalFree (hMem=0xa931f0) returned 0x0 [0071.454] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0071.454] GdipCreateRegion (region=0x14e420) returned 0x0 [0071.454] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0071.454] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e480) returned 0x0 [0071.454] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e520) returned 0x0 [0071.454] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffda80dbd) returned 0x0 [0071.454] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0071.454] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e198) returned 0x0 [0071.454] GetCurrentObject (hdc=0xffffffffef01025c, type=0x1) returned 0x1b00017 [0071.455] GetCurrentObject (hdc=0xffffffffef01025c, type=0x2) returned 0x1900010 [0071.455] GetCurrentObject (hdc=0xffffffffef01025c, type=0x7) returned 0x28050250 [0071.455] GetCurrentObject (hdc=0xffffffffef01025c, type=0x6) returned 0x18a002e [0071.455] SaveDC (hdc=0xffffffffef01025c) returned 1 [0071.455] GetNearestColor (hdc=0xffffffffef01025c, color=0xa0) returned 0xa0 [0071.455] GetNearestColor (hdc=0xffffffffef01025c, color=0x35) returned 0x35 [0071.455] GetNearestColor (hdc=0xffffffffef01025c, color=0x0) returned 0x0 [0071.455] GetNearestColor (hdc=0xffffffffef01025c, color=0x4848e5) returned 0x4848e5 [0071.455] GetNearestColor (hdc=0xffffffffef01025c, color=0x0) returned 0x0 [0071.455] GetNearestColor (hdc=0xffffffffef01025c, color=0x5151ff) returned 0x5151ff [0071.455] GetNearestColor (hdc=0xffffffffef01025c, color=0x4848e5) returned 0x4848e5 [0071.455] GetNearestColor (hdc=0xffffffffef01025c, color=0xc0) returned 0xc0 [0071.455] GetNearestColor (hdc=0xffffffffef01025c, color=0x0) returned 0x0 [0071.455] RestoreDC (hdc=0xffffffffef01025c, nSavedDC=-1) returned 1 [0071.455] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffef01025c) returned 0x0 [0071.455] IsAppThemed () returned 0x1 [0071.455] GetThemeAppProperties () returned 0x3 [0071.455] GetThemeAppProperties () returned 0x3 [0071.455] IsAppThemed () returned 0x1 [0071.455] GetThemeAppProperties () returned 0x3 [0071.456] GetThemeAppProperties () returned 0x3 [0071.456] DrawTextExW (in: hdc=0x8010893, lpchText="Enter Code", cchText=10, lprc=0x14de08, format=0x102415, lpdtp=0x21644b0 | out: lpchText="Enter Code", lprc=0x14de08) returned 13 [0071.456] IsAppThemed () returned 0x1 [0071.456] GetThemeAppProperties () returned 0x3 [0071.456] GetThemeAppProperties () returned 0x3 [0071.456] IsAppThemed () returned 0x1 [0071.456] GetThemeAppProperties () returned 0x3 [0071.456] GetThemeAppProperties () returned 0x3 [0071.456] GetFocus () returned 0x1020c [0071.456] IsAppThemed () returned 0x1 [0071.456] GetThemeAppProperties () returned 0x3 [0071.456] GetThemeAppProperties () returned 0x3 [0071.456] IsAppThemed () returned 0x1 [0071.456] GetThemeAppProperties () returned 0x3 [0071.456] GetThemeAppProperties () returned 0x3 [0071.456] IsThemePartDefined () returned 0x1 [0071.456] IsAppThemed () returned 0x1 [0071.456] GetThemeAppProperties () returned 0x3 [0071.456] GetThemeAppProperties () returned 0x3 [0071.456] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0071.456] IsAppThemed () returned 0x1 [0071.456] GetThemeAppProperties () returned 0x3 [0071.456] GetThemeAppProperties () returned 0x3 [0071.456] IsAppThemed () returned 0x1 [0071.456] GetThemeAppProperties () returned 0x3 [0071.456] GetThemeAppProperties () returned 0x3 [0071.456] IsThemePartDefined () returned 0x1 [0071.456] GdipCreateRegion (region=0x14df00) returned 0x0 [0071.457] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0071.457] GdipCreateMatrix (matrix=0x14df00) returned 0x0 [0071.457] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0071.457] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14df68) returned 0x0 [0071.457] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0071.457] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0071.457] LocalFree (hMem=0xa931f0) returned 0x0 [0071.457] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0071.457] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0071.457] LocalFree (hMem=0xa931f0) returned 0x0 [0071.457] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0071.457] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14dfd0) returned 0x0 [0071.457] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df90) returned 0x0 [0071.457] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df90) returned 0x0 [0071.457] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0071.457] GdipGetDC (graphics=0x1afd81d0, hdc=0x14dfd8) returned 0x0 [0071.457] GetCurrentObject (hdc=0xffffffffef01025c, type=0x1) returned 0x1b00017 [0071.457] GetCurrentObject (hdc=0xffffffffef01025c, type=0x2) returned 0x1900010 [0071.457] GetCurrentObject (hdc=0xffffffffef01025c, type=0x7) returned 0x28050250 [0071.457] GetCurrentObject (hdc=0xffffffffef01025c, type=0x6) returned 0x18a002e [0071.458] SaveDC (hdc=0xffffffffef01025c) returned 1 [0071.458] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x67040763 [0071.458] GetClipRgn (hdc=0xffffffffef01025c, hrgn=0x67040763) returned 0 [0071.458] SelectClipRgn (hdc=0xffffffffef01025c, hrgn=0x39040864) returned 2 [0071.458] DeleteObject (ho=0x67040763) returned 1 [0071.458] DeleteObject (ho=0x39040864) returned 1 [0071.458] OffsetViewportOrgEx (in: hdc=0xffffffffef01025c, x=0, y=0, lppt=0x2164e98 | out: lppt=0x2164e98) returned 1 [0071.458] DrawThemeParentBackground () returned 0x0 [0071.458] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14db88 | out: lpwndpl=0x14db88) returned 1 [0071.458] GetClientRect (in: hWnd=0x401fa, lpRect=0x14daa0 | out: lpRect=0x14daa0) returned 1 [0071.458] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0071.458] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0071.458] GetSystemMetrics (nIndex=42) returned 0 [0071.458] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d800, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0071.458] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d800) returned 0xc [0071.458] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d888 | out: lpRect=0x14d888) returned 1 [0071.458] GetCurrentObject (hdc=0xffffffffef01025c, type=0x1) returned 0x1b00017 [0071.458] GetCurrentObject (hdc=0xffffffffef01025c, type=0x2) returned 0x1900010 [0071.459] GetCurrentObject (hdc=0xffffffffef01025c, type=0x7) returned 0x28050250 [0071.459] GetCurrentObject (hdc=0xffffffffef01025c, type=0x6) returned 0x18a002e [0071.459] SaveDC (hdc=0xffffffffef01025c) returned 2 [0071.459] GetNearestColor (hdc=0xffffffffef01025c, color=0xa0) returned 0xa0 [0071.459] CreateSolidBrush (color=0xa0) returned 0x38100860 [0071.459] FillRect (hDC=0xffffffffef01025c, lprc=0x14d578, hbr=0x38100860) returned 1 [0071.459] DeleteObject (ho=0x38100860) returned 1 [0071.459] RestoreDC (hdc=0xffffffffef01025c, nSavedDC=-1) returned 1 [0071.459] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0071.459] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0071.459] GetSystemMetrics (nIndex=42) returned 0 [0071.459] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0071.459] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0071.459] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d7b8 | out: lpRect=0x14d7b8) returned 1 [0071.459] GetCurrentObject (hdc=0xffffffffef01025c, type=0x1) returned 0x1b00017 [0071.459] GetCurrentObject (hdc=0xffffffffef01025c, type=0x2) returned 0x1900010 [0071.459] GetCurrentObject (hdc=0xffffffffef01025c, type=0x7) returned 0x28050250 [0071.459] GetCurrentObject (hdc=0xffffffffef01025c, type=0x6) returned 0x18a002e [0071.460] SaveDC (hdc=0xffffffffef01025c) returned 2 [0071.460] GetNearestColor (hdc=0xffffffffef01025c, color=0xa0) returned 0xa0 [0071.460] CreateSolidBrush (color=0xa0) returned 0x39100860 [0071.460] FillRect (hDC=0xffffffffef01025c, lprc=0x14d4a8, hbr=0x39100860) returned 1 [0071.460] DeleteObject (ho=0x39100860) returned 1 [0071.460] RestoreDC (hdc=0xffffffffef01025c, nSavedDC=-1) returned 1 [0071.460] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0071.460] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0071.460] GetSystemMetrics (nIndex=42) returned 0 [0071.460] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0071.460] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0071.460] RestoreDC (hdc=0xffffffffef01025c, nSavedDC=-1) returned 1 [0071.460] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffef01025c) returned 0x0 [0071.460] IsAppThemed () returned 0x1 [0071.460] GetThemeAppProperties () returned 0x3 [0071.460] GetThemeAppProperties () returned 0x3 [0071.460] IsAppThemed () returned 0x1 [0071.460] GetThemeAppProperties () returned 0x3 [0071.460] GetThemeAppProperties () returned 0x3 [0071.460] IsThemePartDefined () returned 0x1 [0071.460] GdipCreateRegion (region=0x14dea0) returned 0x0 [0071.461] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0071.461] GdipCreateMatrix (matrix=0x14dea0) returned 0x0 [0071.461] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0071.461] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14df08) returned 0x0 [0071.461] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0071.461] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0071.461] LocalFree (hMem=0xa931f0) returned 0x0 [0071.461] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0071.461] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0071.461] LocalFree (hMem=0xa931f0) returned 0x0 [0071.461] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0071.461] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df70) returned 0x0 [0071.461] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df30) returned 0x0 [0071.461] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df30) returned 0x0 [0071.461] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0071.461] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df78) returned 0x0 [0071.461] GetCurrentObject (hdc=0xffffffffef01025c, type=0x1) returned 0x1b00017 [0071.461] GetCurrentObject (hdc=0xffffffffef01025c, type=0x2) returned 0x1900010 [0071.461] GetCurrentObject (hdc=0xffffffffef01025c, type=0x7) returned 0x28050250 [0071.461] GetCurrentObject (hdc=0xffffffffef01025c, type=0x6) returned 0x18a002e [0071.461] SaveDC (hdc=0xffffffffef01025c) returned 1 [0071.461] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3a040864 [0071.461] GetClipRgn (hdc=0xffffffffef01025c, hrgn=0x3a040864) returned 0 [0071.462] SelectClipRgn (hdc=0xffffffffef01025c, hrgn=0x69040763) returned 2 [0071.462] DeleteObject (ho=0x3a040864) returned 1 [0071.462] DeleteObject (ho=0x69040763) returned 1 [0071.462] OffsetViewportOrgEx (in: hdc=0xffffffffef01025c, x=0, y=0, lppt=0x2165ca0 | out: lppt=0x2165ca0) returned 1 [0071.462] IsAppThemed () returned 0x1 [0071.462] GetThemeAppProperties () returned 0x3 [0071.462] GetThemeAppProperties () returned 0x3 [0071.462] DrawThemeBackground () returned 0x0 [0071.462] RestoreDC (hdc=0xffffffffef01025c, nSavedDC=-1) returned 1 [0071.462] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffef01025c) returned 0x0 [0071.462] GdipCreateRegion (region=0x14de90) returned 0x0 [0071.462] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0071.462] GdipCreateMatrix (matrix=0x14de90) returned 0x0 [0071.462] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0071.462] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14def8) returned 0x0 [0071.462] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0071.462] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0071.463] LocalFree (hMem=0xa931f0) returned 0x0 [0071.463] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0071.463] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0071.463] LocalFree (hMem=0xa931f0) returned 0x0 [0071.463] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0071.463] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df60) returned 0x0 [0071.463] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df20) returned 0x0 [0071.463] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df20) returned 0x0 [0071.463] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0071.463] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df68) returned 0x0 [0071.463] GetCurrentObject (hdc=0xffffffffef01025c, type=0x1) returned 0x1b00017 [0071.463] GetCurrentObject (hdc=0xffffffffef01025c, type=0x2) returned 0x1900010 [0071.463] GetCurrentObject (hdc=0xffffffffef01025c, type=0x7) returned 0x28050250 [0071.463] GetCurrentObject (hdc=0xffffffffef01025c, type=0x6) returned 0x18a002e [0071.463] SaveDC (hdc=0xffffffffef01025c) returned 1 [0071.463] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6a040763 [0071.463] GetClipRgn (hdc=0xffffffffef01025c, hrgn=0x6a040763) returned 0 [0071.464] SelectClipRgn (hdc=0xffffffffef01025c, hrgn=0x3b040864) returned 2 [0071.464] DeleteObject (ho=0x6a040763) returned 1 [0071.464] DeleteObject (ho=0x3b040864) returned 1 [0071.464] OffsetViewportOrgEx (in: hdc=0xffffffffef01025c, x=0, y=0, lppt=0x2166178 | out: lppt=0x2166178) returned 1 [0071.464] IsAppThemed () returned 0x1 [0071.464] GetThemeAppProperties () returned 0x3 [0071.464] GetThemeAppProperties () returned 0x3 [0071.464] GetThemeBackgroundContentRect () returned 0x0 [0071.464] RestoreDC (hdc=0xffffffffef01025c, nSavedDC=-1) returned 1 [0071.464] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffef01025c) returned 0x0 [0071.464] IsAppThemed () returned 0x1 [0071.464] GetThemeAppProperties () returned 0x3 [0071.464] GetThemeAppProperties () returned 0x3 [0071.464] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e148) returned 0x0 [0071.464] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e128) returned 0x0 [0071.464] GetCurrentObject (hdc=0xffffffffef01025c, type=0x1) returned 0x1b00017 [0071.464] GetCurrentObject (hdc=0xffffffffef01025c, type=0x2) returned 0x1900010 [0071.464] GetCurrentObject (hdc=0xffffffffef01025c, type=0x7) returned 0x28050250 [0071.464] GetCurrentObject (hdc=0xffffffffef01025c, type=0x6) returned 0x18a002e [0071.464] SaveDC (hdc=0xffffffffef01025c) returned 1 [0071.465] GetTextAlign (hdc=0xffffffffef01025c) returned 0x0 [0071.465] GetTextColor (hdc=0xffffffffef01025c) returned 0x0 [0071.465] GetCurrentObject (hdc=0xffffffffef01025c, type=0x6) returned 0x18a002e [0071.465] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dc60 | out: pv=0x14dc60) returned 92 [0071.465] SelectObject (hdc=0xffffffffef01025c, h=0x120a086d) returned 0x18a002e [0071.465] GetBkMode (hdc=0xffffffffef01025c) returned 2 [0071.465] SetBkMode (hdc=0xffffffffef01025c, mode=1) returned 2 [0071.465] DrawTextExW (in: hdc=0xffffffffef01025c, lpchText="Enter Code", cchText=10, lprc=0x14dea0, format=0x102415, lpdtp=0x2166758 | out: lpchText="Enter Code", lprc=0x14dea0) returned 13 [0071.465] DrawTextExW (in: hdc=0xffffffffef01025c, lpchText="Enter Code", cchText=10, lprc=0x14e0b8, format=0x102015, lpdtp=0x2166758 | out: lpchText="Enter Code", lprc=0x14e0b8) returned 13 [0071.465] RestoreDC (hdc=0xffffffffef01025c, nSavedDC=-1) returned 1 [0071.465] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffef01025c) returned 0x0 [0071.465] GetFocus () returned 0x1020c [0071.465] IsAppThemed () returned 0x1 [0071.465] GetThemeAppProperties () returned 0x3 [0071.465] GetThemeAppProperties () returned 0x3 [0071.466] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e438) returned 0x0 [0071.466] BitBlt (hdc=0x5010830, x=0, y=0, cx=123, cy=23, hdcSrc=0xffffffffef01025c, x1=0, y1=0, rop=0xcc0020) returned 1 [0071.466] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffef01025c) returned 0x0 [0071.466] SelectPalette (hdc=0x5010830, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0071.466] SelectObject (hdc=0xffffffffef01025c, h=0x185000f) returned 0x28050250 [0071.466] DeleteDC (hdc=0xffffffffef01025c) returned 1 [0071.466] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0071.466] EndPaint (hWnd=0x301fc, lpPaint=0x14e418) returned 1 [0071.466] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.466] IsWindowUnicode (hWnd=0x201da) returned 1 [0071.466] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.466] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.466] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0071.466] BeginPaint (in: hWnd=0x201da, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0xb010256 [0071.466] SelectPalette (hdc=0xb010256, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0071.466] CreateCompatibleDC (hdc=0xb010256) returned 0xfffffffff101025c [0071.466] SelectObject (hdc=0xfffffffff101025c, h=0x28050250) returned 0x185000f [0071.467] GdipCreateFromHDC (hdc=0xfffffffff101025c, graphics=0x14e428) returned 0x0 [0071.467] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0071.467] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=40, height=20, combineMode=0x0) returned 0x0 [0071.467] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0071.467] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0071.467] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14e4b8) returned 0x0 [0071.467] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0071.467] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0071.467] LocalFree (hMem=0xa931f0) returned 0x0 [0071.467] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0071.467] GdipCreateRegion (region=0x14e450) returned 0x0 [0071.467] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0071.467] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0071.467] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0071.467] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0071.467] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0071.467] GetSystemMetrics (nIndex=42) returned 0 [0071.467] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:57") returned 4 [0071.467] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0071.468] GetClientRect (in: hWnd=0x201da, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0071.468] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0071.468] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0071.468] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0071.468] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0071.468] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0071.468] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0071.468] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0071.468] LocalFree (hMem=0xa931f0) returned 0x0 [0071.469] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0071.469] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0071.469] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0071.469] LocalFree (hMem=0xa931f0) returned 0x0 [0071.469] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0071.469] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0071.469] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0071.469] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0071.469] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0071.469] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0071.470] GetCurrentObject (hdc=0xfffffffff101025c, type=0x1) returned 0x1b00017 [0071.470] GetCurrentObject (hdc=0xfffffffff101025c, type=0x2) returned 0x1900010 [0071.470] GetCurrentObject (hdc=0xfffffffff101025c, type=0x7) returned 0x28050250 [0071.470] GetCurrentObject (hdc=0xfffffffff101025c, type=0x6) returned 0x18a002e [0071.470] SaveDC (hdc=0xfffffffff101025c) returned 1 [0071.470] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3c040864 [0071.470] GetClipRgn (hdc=0xfffffffff101025c, hrgn=0x3c040864) returned 0 [0071.470] SelectClipRgn (hdc=0xfffffffff101025c, hrgn=0x6d040763) returned 2 [0071.470] DeleteObject (ho=0x3c040864) returned 1 [0071.470] DeleteObject (ho=0x6d040763) returned 1 [0071.470] OffsetViewportOrgEx (in: hdc=0xfffffffff101025c, x=0, y=0, lppt=0x2166f90 | out: lppt=0x2166f90) returned 1 [0071.470] GetNearestColor (hdc=0xfffffffff101025c, color=0xa0) returned 0xa0 [0071.470] CreateSolidBrush (color=0xa0) returned 0x3a100860 [0071.470] FillRect (hDC=0xfffffffff101025c, lprc=0x14e1e8, hbr=0x3a100860) returned 1 [0071.470] DeleteObject (ho=0x3a100860) returned 1 [0071.470] RestoreDC (hdc=0xfffffffff101025c, nSavedDC=-1) returned 1 [0071.470] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xfffffffff101025c) returned 0x0 [0071.470] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffda60dbd) returned 0x0 [0071.471] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0071.471] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0071.471] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0071.471] GetSystemMetrics (nIndex=42) returned 0 [0071.471] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:57") returned 4 [0071.471] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0071.471] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0071.471] GetCurrentObject (hdc=0xfffffffff101025c, type=0x1) returned 0x1b00017 [0071.471] GetCurrentObject (hdc=0xfffffffff101025c, type=0x2) returned 0x1900010 [0071.471] GetCurrentObject (hdc=0xfffffffff101025c, type=0x7) returned 0x28050250 [0071.471] GetCurrentObject (hdc=0xfffffffff101025c, type=0x6) returned 0x18a002e [0071.471] SaveDC (hdc=0xfffffffff101025c) returned 1 [0071.471] GetNearestColor (hdc=0xfffffffff101025c, color=0xffffff) returned 0xffffff [0071.471] RestoreDC (hdc=0xfffffffff101025c, nSavedDC=-1) returned 1 [0071.471] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xfffffffff101025c) returned 0x0 [0071.471] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0071.471] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0071.472] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0071.472] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0071.472] GetCurrentObject (hdc=0xfffffffff101025c, type=0x1) returned 0x1b00017 [0071.472] GetCurrentObject (hdc=0xfffffffff101025c, type=0x2) returned 0x1900010 [0071.472] GetCurrentObject (hdc=0xfffffffff101025c, type=0x7) returned 0x28050250 [0071.472] GetCurrentObject (hdc=0xfffffffff101025c, type=0x6) returned 0x18a002e [0071.472] SaveDC (hdc=0xfffffffff101025c) returned 1 [0071.472] GetTextAlign (hdc=0xfffffffff101025c) returned 0x0 [0071.472] GetTextColor (hdc=0xfffffffff101025c) returned 0x0 [0071.474] SetTextColor (hdc=0xfffffffff101025c, color=0xffffff) returned 0x0 [0071.474] GetCurrentObject (hdc=0xfffffffff101025c, type=0x6) returned 0x18a002e [0071.474] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0071.474] SelectObject (hdc=0xfffffffff101025c, h=0x200a0899) returned 0x18a002e [0071.474] GetBkMode (hdc=0xfffffffff101025c) returned 2 [0071.474] SetBkMode (hdc=0xfffffffff101025c, mode=1) returned 2 [0071.474] DrawTextExW (in: hdc=0xfffffffff101025c, lpchText="4:57", cchText=4, lprc=0x14e1c8, format=0x100000, lpdtp=0x2167820 | out: lpchText="4:57", lprc=0x14e1c8) returned 20 [0071.475] RestoreDC (hdc=0xfffffffff101025c, nSavedDC=-1) returned 1 [0071.475] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xfffffffff101025c) returned 0x0 [0071.475] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0071.475] BitBlt (hdc=0xb010256, x=0, y=0, cx=40, cy=20, hdcSrc=0xfffffffff101025c, x1=0, y1=0, rop=0xcc0020) returned 1 [0071.475] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xfffffffff101025c) returned 0x0 [0071.475] SelectPalette (hdc=0xb010256, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0071.475] SelectObject (hdc=0xfffffffff101025c, h=0x185000f) returned 0x28050250 [0071.476] DeleteDC (hdc=0xfffffffff101025c) returned 1 [0071.476] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0071.476] EndPaint (hWnd=0x201da, lpPaint=0x14e448) returned 1 [0071.476] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.476] IsWindowUnicode (hWnd=0x201dc) returned 1 [0071.476] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.476] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.476] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0071.476] BeginPaint (in: hWnd=0x201dc, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0x5010825 [0071.476] SelectPalette (hdc=0x5010825, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0071.476] CreateCompatibleDC (hdc=0x5010825) returned 0xfffffffff301025c [0071.476] SelectObject (hdc=0xfffffffff301025c, h=0x28050250) returned 0x185000f [0071.476] GdipCreateFromHDC (hdc=0xfffffffff301025c, graphics=0x14e428) returned 0x0 [0071.476] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0071.476] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=144, height=13, combineMode=0x0) returned 0x0 [0071.476] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0071.476] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0071.476] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14e4b8) returned 0x0 [0071.476] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0071.477] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0071.477] LocalFree (hMem=0xa931f0) returned 0x0 [0071.477] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0071.477] GdipCreateRegion (region=0x14e450) returned 0x0 [0071.477] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0071.477] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0071.477] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0071.477] GetWindowTextLengthW (hWnd=0x201dc) returned 29 [0071.477] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201dc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1d [0071.477] GetSystemMetrics (nIndex=42) returned 0 [0071.477] GetWindowTextW (in: hWnd=0x201dc, lpString=0x14e320, nMaxCount=30 | out: lpString="Your Files Will Be Deleted on") returned 29 [0071.477] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201dc, Msg=0xd, wParam=0x1e, lParam=0x14e320) returned 0x1d [0071.477] GetClientRect (in: hWnd=0x201dc, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0071.477] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0071.477] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0071.477] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0071.477] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0071.477] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0071.477] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0071.477] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0071.477] LocalFree (hMem=0xa931f0) returned 0x0 [0071.477] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0071.478] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0071.478] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0071.478] LocalFree (hMem=0xa931f0) returned 0x0 [0071.478] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0071.478] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0071.478] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0071.478] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0071.478] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0071.478] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0071.478] GetCurrentObject (hdc=0xfffffffff301025c, type=0x1) returned 0x1b00017 [0071.478] GetCurrentObject (hdc=0xfffffffff301025c, type=0x2) returned 0x1900010 [0071.478] GetCurrentObject (hdc=0xfffffffff301025c, type=0x7) returned 0x28050250 [0071.478] GetCurrentObject (hdc=0xfffffffff301025c, type=0x6) returned 0x18a002e [0071.478] SaveDC (hdc=0xfffffffff301025c) returned 1 [0071.478] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6e040763 [0071.478] GetClipRgn (hdc=0xfffffffff301025c, hrgn=0x6e040763) returned 0 [0071.478] SelectClipRgn (hdc=0xfffffffff301025c, hrgn=0x3e040864) returned 2 [0071.478] DeleteObject (ho=0x6e040763) returned 1 [0071.478] DeleteObject (ho=0x3e040864) returned 1 [0071.478] OffsetViewportOrgEx (in: hdc=0xfffffffff301025c, x=0, y=0, lppt=0x2167fe8 | out: lppt=0x2167fe8) returned 1 [0071.479] GetNearestColor (hdc=0xfffffffff301025c, color=0xa0) returned 0xa0 [0071.479] CreateSolidBrush (color=0xa0) returned 0x3b100860 [0071.479] FillRect (hDC=0xfffffffff301025c, lprc=0x14e1e8, hbr=0x3b100860) returned 1 [0071.479] DeleteObject (ho=0x3b100860) returned 1 [0071.479] RestoreDC (hdc=0xfffffffff301025c, nSavedDC=-1) returned 1 [0071.479] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xfffffffff301025c) returned 0x0 [0071.479] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffda40dbd) returned 0x0 [0071.479] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0071.479] GetWindowTextLengthW (hWnd=0x201dc) returned 29 [0071.479] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201dc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1d [0071.479] GetSystemMetrics (nIndex=42) returned 0 [0071.479] GetWindowTextW (in: hWnd=0x201dc, lpString=0x14e320, nMaxCount=30 | out: lpString="Your Files Will Be Deleted on") returned 29 [0071.479] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201dc, Msg=0xd, wParam=0x1e, lParam=0x14e320) returned 0x1d [0071.479] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0071.479] GetCurrentObject (hdc=0xfffffffff301025c, type=0x1) returned 0x1b00017 [0071.479] GetCurrentObject (hdc=0xfffffffff301025c, type=0x2) returned 0x1900010 [0071.479] GetCurrentObject (hdc=0xfffffffff301025c, type=0x7) returned 0x28050250 [0071.479] GetCurrentObject (hdc=0xfffffffff301025c, type=0x6) returned 0x18a002e [0071.479] SaveDC (hdc=0xfffffffff301025c) returned 1 [0071.485] GetNearestColor (hdc=0xfffffffff301025c, color=0xffffff) returned 0xffffff [0071.485] RestoreDC (hdc=0xfffffffff301025c, nSavedDC=-1) returned 1 [0071.485] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xfffffffff301025c) returned 0x0 [0071.486] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0071.486] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0071.486] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0071.486] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0071.486] GetCurrentObject (hdc=0xfffffffff301025c, type=0x1) returned 0x1b00017 [0071.486] GetCurrentObject (hdc=0xfffffffff301025c, type=0x2) returned 0x1900010 [0071.486] GetCurrentObject (hdc=0xfffffffff301025c, type=0x7) returned 0x28050250 [0071.486] GetCurrentObject (hdc=0xfffffffff301025c, type=0x6) returned 0x18a002e [0071.486] SaveDC (hdc=0xfffffffff301025c) returned 1 [0071.486] GetTextAlign (hdc=0xfffffffff301025c) returned 0x0 [0071.486] GetTextColor (hdc=0xfffffffff301025c) returned 0x0 [0071.486] SetTextColor (hdc=0xfffffffff301025c, color=0xffffff) returned 0x0 [0071.486] GetCurrentObject (hdc=0xfffffffff301025c, type=0x6) returned 0x18a002e [0071.486] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0071.486] SelectObject (hdc=0xfffffffff301025c, h=0xffffffffc80a01db) returned 0x18a002e [0071.486] GetBkMode (hdc=0xfffffffff301025c) returned 2 [0071.487] SetBkMode (hdc=0xfffffffff301025c, mode=1) returned 2 [0071.487] DrawTextExW (in: hdc=0xfffffffff301025c, lpchText="Your Files Will Be Deleted on", cchText=29, lprc=0x14e1c8, format=0x100000, lpdtp=0x2168908 | out: lpchText="Your Files Will Be Deleted on", lprc=0x14e1c8) returned 13 [0071.491] RestoreDC (hdc=0xfffffffff301025c, nSavedDC=-1) returned 1 [0071.491] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xfffffffff301025c) returned 0x0 [0071.491] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0071.491] BitBlt (hdc=0x5010825, x=0, y=0, cx=144, cy=13, hdcSrc=0xfffffffff301025c, x1=0, y1=0, rop=0xcc0020) returned 1 [0071.491] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xfffffffff301025c) returned 0x0 [0071.491] SelectPalette (hdc=0x5010825, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0071.492] SelectObject (hdc=0xfffffffff301025c, h=0x185000f) returned 0x28050250 [0071.492] DeleteDC (hdc=0xfffffffff301025c) returned 1 [0071.492] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0071.492] EndPaint (hWnd=0x201dc, lpPaint=0x14e448) returned 1 [0071.492] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.492] IsWindowUnicode (hWnd=0x10206) returned 1 [0071.492] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.492] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.492] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0071.492] BeginPaint (in: hWnd=0x10206, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0x5010830 [0071.492] SelectPalette (hdc=0x5010830, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0071.492] CreateCompatibleDC (hdc=0x5010830) returned 0xfffffffff501025c [0071.492] DeleteObject (ho=0x28050250) returned 1 [0071.492] GetObjectType (h=0x5010830) returned 0x3 [0071.492] CreateCompatibleBitmap (hdc=0x5010830, cx=1, cy=1) returned 0x2d050873 [0071.493] GetDIBits (in: hdc=0x5010830, hbm=0x2d050873, start=0x0, cLines=0x0, lpvBits=0x0, lpbmi=0x14de38, usage=0x0 | out: lpvBits=0x0, lpbmi=0x14de38) returned 1 [0071.493] GetDIBits (in: hdc=0x5010830, hbm=0x2d050873, start=0x0, cLines=0x1, lpvBits=0x0, lpbmi=0x14de38, usage=0x0 | out: lpvBits=0x0, lpbmi=0x14de38) returned 1 [0071.493] DeleteObject (ho=0x2d050873) returned 1 [0071.493] CreateDIBSection (in: hdc=0x5010830, lpbmi=0x14dee8, usage=0x0, ppvBits=0x14e4a8, hSection=0x0, offset=0x0 | out: ppvBits=0x14e4a8) returned 0x29050250 [0071.493] SelectObject (hdc=0xfffffffff501025c, h=0x29050250) returned 0x185000f [0071.493] GdipCreateFromHDC (hdc=0xfffffffff501025c, graphics=0x14e428) returned 0x0 [0071.493] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0071.493] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=55, height=26, combineMode=0x0) returned 0x0 [0071.493] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0071.493] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0071.493] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14e4b8) returned 0x0 [0071.493] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0071.493] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0071.493] LocalFree (hMem=0xa931f0) returned 0x0 [0071.493] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0071.494] GdipCreateRegion (region=0x14e450) returned 0x0 [0071.494] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0071.494] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0071.494] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0071.494] GetWindowTextLengthW (hWnd=0x10206) returned 20 [0071.494] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10206, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x14 [0071.494] GetSystemMetrics (nIndex=42) returned 0 [0071.494] GetWindowTextW (in: hWnd=0x10206, lpString=0x14e330, nMaxCount=21 | out: lpString="208 Files\r\nEncrypted") returned 20 [0071.494] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10206, Msg=0xd, wParam=0x15, lParam=0x14e330) returned 0x14 [0071.494] GetClientRect (in: hWnd=0x10206, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0071.494] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0071.494] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0071.494] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0071.494] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0071.494] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0071.494] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0071.494] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0071.494] LocalFree (hMem=0xa931f0) returned 0x0 [0071.494] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0071.494] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0071.494] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0071.495] LocalFree (hMem=0xa931f0) returned 0x0 [0071.495] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0071.495] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0071.495] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0071.495] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0071.495] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0071.495] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0071.495] GetCurrentObject (hdc=0xfffffffff501025c, type=0x1) returned 0x1b00017 [0071.495] GetCurrentObject (hdc=0xfffffffff501025c, type=0x2) returned 0x1900010 [0071.495] GetCurrentObject (hdc=0xfffffffff501025c, type=0x7) returned 0x29050250 [0071.495] GetCurrentObject (hdc=0xfffffffff501025c, type=0x6) returned 0x18a002e [0071.495] SaveDC (hdc=0xfffffffff501025c) returned 1 [0071.495] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3f040864 [0071.495] GetClipRgn (hdc=0xfffffffff501025c, hrgn=0x3f040864) returned 0 [0071.495] SelectClipRgn (hdc=0xfffffffff501025c, hrgn=0x70040763) returned 2 [0071.495] DeleteObject (ho=0x3f040864) returned 1 [0071.495] DeleteObject (ho=0x70040763) returned 1 [0071.495] OffsetViewportOrgEx (in: hdc=0xfffffffff501025c, x=0, y=0, lppt=0x216a100 | out: lppt=0x216a100) returned 1 [0071.495] GetNearestColor (hdc=0xfffffffff501025c, color=0xa0) returned 0xa0 [0071.495] CreateSolidBrush (color=0xa0) returned 0x3c100860 [0071.495] FillRect (hDC=0xfffffffff501025c, lprc=0x14e1e8, hbr=0x3c100860) returned 1 [0071.496] DeleteObject (ho=0x3c100860) returned 1 [0071.496] RestoreDC (hdc=0xfffffffff501025c, nSavedDC=-1) returned 1 [0071.496] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xfffffffff501025c) returned 0x0 [0071.496] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffda20dbd) returned 0x0 [0071.496] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0071.496] GetWindowTextLengthW (hWnd=0x10206) returned 20 [0071.496] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10206, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x14 [0071.496] GetSystemMetrics (nIndex=42) returned 0 [0071.496] GetWindowTextW (in: hWnd=0x10206, lpString=0x14e330, nMaxCount=21 | out: lpString="208 Files\r\nEncrypted") returned 20 [0071.496] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10206, Msg=0xd, wParam=0x15, lParam=0x14e330) returned 0x14 [0071.496] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0071.496] GetCurrentObject (hdc=0xfffffffff501025c, type=0x1) returned 0x1b00017 [0071.496] GetCurrentObject (hdc=0xfffffffff501025c, type=0x2) returned 0x1900010 [0071.496] GetCurrentObject (hdc=0xfffffffff501025c, type=0x7) returned 0x29050250 [0071.496] GetCurrentObject (hdc=0xfffffffff501025c, type=0x6) returned 0x18a002e [0071.496] SaveDC (hdc=0xfffffffff501025c) returned 1 [0071.496] GetNearestColor (hdc=0xfffffffff501025c, color=0xffffff) returned 0xffffff [0071.496] RestoreDC (hdc=0xfffffffff501025c, nSavedDC=-1) returned 1 [0071.496] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xfffffffff501025c) returned 0x0 [0071.497] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0071.497] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0071.497] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0071.497] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0071.497] GetCurrentObject (hdc=0xfffffffff501025c, type=0x1) returned 0x1b00017 [0071.497] GetCurrentObject (hdc=0xfffffffff501025c, type=0x2) returned 0x1900010 [0071.497] GetCurrentObject (hdc=0xfffffffff501025c, type=0x7) returned 0x29050250 [0071.497] GetCurrentObject (hdc=0xfffffffff501025c, type=0x6) returned 0x18a002e [0071.497] SaveDC (hdc=0xfffffffff501025c) returned 1 [0071.497] GetTextAlign (hdc=0xfffffffff501025c) returned 0x0 [0071.497] GetTextColor (hdc=0xfffffffff501025c) returned 0x0 [0071.497] SetTextColor (hdc=0xfffffffff501025c, color=0xffffff) returned 0x0 [0071.497] GetCurrentObject (hdc=0xfffffffff501025c, type=0x6) returned 0x18a002e [0071.497] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0071.497] SelectObject (hdc=0xfffffffff501025c, h=0xb0a087e) returned 0x18a002e [0071.497] GetBkMode (hdc=0xfffffffff501025c) returned 2 [0071.497] SetBkMode (hdc=0xfffffffff501025c, mode=1) returned 2 [0071.497] DrawTextExW (in: hdc=0xfffffffff501025c, lpchText="208 Files\r\nEncrypted", cchText=20, lprc=0x14e1c8, format=0x100000, lpdtp=0x216a9f0 | out: lpchText="208 Files\r\nEncrypted", lprc=0x14e1c8) returned 26 [0071.498] RestoreDC (hdc=0xfffffffff501025c, nSavedDC=-1) returned 1 [0071.498] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xfffffffff501025c) returned 0x0 [0071.498] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0071.498] BitBlt (hdc=0x5010830, x=0, y=0, cx=55, cy=26, hdcSrc=0xfffffffff501025c, x1=0, y1=0, rop=0xcc0020) returned 1 [0071.498] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xfffffffff501025c) returned 0x0 [0071.498] SelectPalette (hdc=0x5010830, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0071.498] SelectObject (hdc=0xfffffffff501025c, h=0x185000f) returned 0x29050250 [0071.498] DeleteDC (hdc=0xfffffffff501025c) returned 1 [0071.498] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0071.499] EndPaint (hWnd=0x10206, lpPaint=0x14e448) returned 1 [0071.499] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.499] IsWindowUnicode (hWnd=0x10208) returned 1 [0071.499] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.499] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.499] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0071.499] BeginPaint (in: hWnd=0x10208, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0xb010256 [0071.499] SelectPalette (hdc=0xb010256, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0071.499] CreateCompatibleDC (hdc=0xb010256) returned 0xfffffffff701025c [0071.499] SelectObject (hdc=0xfffffffff701025c, h=0x29050250) returned 0x185000f [0071.499] GdipCreateFromHDC (hdc=0xfffffffff701025c, graphics=0x14e428) returned 0x0 [0071.499] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0071.499] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=87, height=15, combineMode=0x0) returned 0x0 [0071.499] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0071.499] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0071.499] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14e4b8) returned 0x0 [0071.499] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0071.499] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0071.499] LocalFree (hMem=0xa931f0) returned 0x0 [0071.499] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0071.499] GdipCreateRegion (region=0x14e450) returned 0x0 [0071.500] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0071.500] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0071.500] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0071.500] GetWindowTextLengthW (hWnd=0x10208) returned 16 [0071.500] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10208, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10 [0071.500] GetSystemMetrics (nIndex=42) returned 0 [0071.500] GetWindowTextW (in: hWnd=0x10208, lpString=0x14e330, nMaxCount=17 | out: lpString="Bitcoin Address:") returned 16 [0071.500] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10208, Msg=0xd, wParam=0x11, lParam=0x14e330) returned 0x10 [0071.500] GetClientRect (in: hWnd=0x10208, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0071.500] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0071.500] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0071.500] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0071.500] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0071.500] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0071.500] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0071.500] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0071.500] LocalFree (hMem=0xa931f0) returned 0x0 [0071.500] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0071.500] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0071.500] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0071.500] LocalFree (hMem=0xa931f0) returned 0x0 [0071.500] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0071.500] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0071.501] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0071.501] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0071.501] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0071.501] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0071.501] GetCurrentObject (hdc=0xfffffffff701025c, type=0x1) returned 0x1b00017 [0071.501] GetCurrentObject (hdc=0xfffffffff701025c, type=0x2) returned 0x1900010 [0071.501] GetCurrentObject (hdc=0xfffffffff701025c, type=0x7) returned 0x29050250 [0071.501] GetCurrentObject (hdc=0xfffffffff701025c, type=0x6) returned 0x18a002e [0071.501] SaveDC (hdc=0xfffffffff701025c) returned 1 [0071.501] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x71040763 [0071.501] GetClipRgn (hdc=0xfffffffff701025c, hrgn=0x71040763) returned 0 [0071.501] SelectClipRgn (hdc=0xfffffffff701025c, hrgn=0x41040864) returned 2 [0071.501] DeleteObject (ho=0x71040763) returned 1 [0071.501] DeleteObject (ho=0x41040864) returned 1 [0071.501] OffsetViewportOrgEx (in: hdc=0xfffffffff701025c, x=0, y=0, lppt=0x216b170 | out: lppt=0x216b170) returned 1 [0071.501] GetNearestColor (hdc=0xfffffffff701025c, color=0xa0) returned 0xa0 [0071.501] CreateSolidBrush (color=0xa0) returned 0x3d100860 [0071.501] FillRect (hDC=0xfffffffff701025c, lprc=0x14e1e8, hbr=0x3d100860) returned 1 [0071.501] DeleteObject (ho=0x3d100860) returned 1 [0071.501] RestoreDC (hdc=0xfffffffff701025c, nSavedDC=-1) returned 1 [0071.501] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xfffffffff701025c) returned 0x0 [0071.502] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffda00dbd) returned 0x0 [0071.502] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0071.502] GetWindowTextLengthW (hWnd=0x10208) returned 16 [0071.502] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10208, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10 [0071.502] GetSystemMetrics (nIndex=42) returned 0 [0071.502] GetWindowTextW (in: hWnd=0x10208, lpString=0x14e330, nMaxCount=17 | out: lpString="Bitcoin Address:") returned 16 [0071.502] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10208, Msg=0xd, wParam=0x11, lParam=0x14e330) returned 0x10 [0071.502] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0071.502] GetCurrentObject (hdc=0xfffffffff701025c, type=0x1) returned 0x1b00017 [0071.502] GetCurrentObject (hdc=0xfffffffff701025c, type=0x2) returned 0x1900010 [0071.502] GetCurrentObject (hdc=0xfffffffff701025c, type=0x7) returned 0x29050250 [0071.502] GetCurrentObject (hdc=0xfffffffff701025c, type=0x6) returned 0x18a002e [0071.502] SaveDC (hdc=0xfffffffff701025c) returned 1 [0071.502] GetNearestColor (hdc=0xfffffffff701025c, color=0xffffff) returned 0xffffff [0071.502] RestoreDC (hdc=0xfffffffff701025c, nSavedDC=-1) returned 1 [0071.502] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xfffffffff701025c) returned 0x0 [0071.502] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0071.502] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0071.502] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0071.503] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0071.503] GetCurrentObject (hdc=0xfffffffff701025c, type=0x1) returned 0x1b00017 [0071.503] GetCurrentObject (hdc=0xfffffffff701025c, type=0x2) returned 0x1900010 [0071.503] GetCurrentObject (hdc=0xfffffffff701025c, type=0x7) returned 0x29050250 [0071.503] GetCurrentObject (hdc=0xfffffffff701025c, type=0x6) returned 0x18a002e [0071.503] SaveDC (hdc=0xfffffffff701025c) returned 1 [0071.503] GetTextAlign (hdc=0xfffffffff701025c) returned 0x0 [0071.503] GetTextColor (hdc=0xfffffffff701025c) returned 0x0 [0071.503] SetTextColor (hdc=0xfffffffff701025c, color=0xffffff) returned 0x0 [0071.503] GetCurrentObject (hdc=0xfffffffff701025c, type=0x6) returned 0x18a002e [0071.503] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0071.503] SelectObject (hdc=0xfffffffff701025c, h=0x370a08a3) returned 0x18a002e [0071.503] GetBkMode (hdc=0xfffffffff701025c) returned 2 [0071.503] SetBkMode (hdc=0xfffffffff701025c, mode=1) returned 2 [0071.503] DrawTextExW (in: hdc=0xfffffffff701025c, lpchText="Bitcoin Address:", cchText=16, lprc=0x14e1c8, format=0x100000, lpdtp=0x216ba48 | out: lpchText="Bitcoin Address:", lprc=0x14e1c8) returned 15 [0071.505] RestoreDC (hdc=0xfffffffff701025c, nSavedDC=-1) returned 1 [0071.505] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xfffffffff701025c) returned 0x0 [0071.505] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0071.505] BitBlt (hdc=0xb010256, x=0, y=0, cx=87, cy=15, hdcSrc=0xfffffffff701025c, x1=0, y1=0, rop=0xcc0020) returned 1 [0071.505] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xfffffffff701025c) returned 0x0 [0071.505] SelectPalette (hdc=0xb010256, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0071.505] SelectObject (hdc=0xfffffffff701025c, h=0x185000f) returned 0x29050250 [0071.505] DeleteDC (hdc=0xfffffffff701025c) returned 1 [0071.505] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0071.505] EndPaint (hWnd=0x10208, lpPaint=0x14e448) returned 1 [0071.505] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.505] IsWindowUnicode (hWnd=0x1020a) returned 1 [0071.505] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.505] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.505] DispatchMessageW (lpMsg=0x14edb0) returned 0x1 [0071.505] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020a, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0071.505] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x138, wParam=0xfffffffff901025c, lParam=0x1020a) returned 0x1100059 [0071.507] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.507] IsWindowUnicode (hWnd=0x1020e) returned 1 [0071.507] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.507] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.507] DispatchMessageW (lpMsg=0x14edb0) returned 0x1 [0071.507] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020e, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0071.507] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x138, wParam=0x5010830, lParam=0x1020e) returned 0x1100059 [0071.507] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x138, wParam=0x5010830, lParam=0x1020e) returned 0x1100059 [0071.511] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.511] IsWindowUnicode (hWnd=0x10210) returned 1 [0071.511] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.511] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.511] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0071.511] BeginPaint (in: hWnd=0x10210, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0xb010256 [0071.511] SelectPalette (hdc=0xb010256, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0071.511] CreateCompatibleDC (hdc=0xb010256) returned 0x1801089a [0071.511] SelectObject (hdc=0x1801089a, h=0x29050250) returned 0x185000f [0071.511] GdipCreateFromHDC (hdc=0x1801089a, graphics=0x14e428) returned 0x0 [0071.511] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0071.511] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=216, height=23, combineMode=0x0) returned 0x0 [0071.511] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0071.512] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0071.512] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14e4b8) returned 0x0 [0071.512] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0071.512] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0071.512] LocalFree (hMem=0xa931f0) returned 0x0 [0071.512] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0071.512] GdipCreateRegion (region=0x14e450) returned 0x0 [0071.512] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0071.512] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0071.512] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0071.512] GetWindowTextLengthW (hWnd=0x10210) returned 24 [0071.512] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10210, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0071.512] GetSystemMetrics (nIndex=42) returned 0 [0071.512] GetWindowTextW (in: hWnd=0x10210, lpString=0x14e320, nMaxCount=25 | out: lpString="Your Files are Encrypted") returned 24 [0071.512] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10210, Msg=0xd, wParam=0x19, lParam=0x14e320) returned 0x18 [0071.512] GetClientRect (in: hWnd=0x10210, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0071.512] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0071.512] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0071.512] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0071.512] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0071.512] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0071.513] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0071.513] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0071.513] LocalFree (hMem=0xa931f0) returned 0x0 [0071.513] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0071.513] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0071.513] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0071.513] LocalFree (hMem=0xa931f0) returned 0x0 [0071.513] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0071.513] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0071.513] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0071.513] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0071.513] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0071.513] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0071.513] GetCurrentObject (hdc=0x1801089a, type=0x1) returned 0x1b00017 [0071.513] GetCurrentObject (hdc=0x1801089a, type=0x2) returned 0x1900010 [0071.513] GetCurrentObject (hdc=0x1801089a, type=0x7) returned 0x29050250 [0071.513] GetCurrentObject (hdc=0x1801089a, type=0x6) returned 0x18a002e [0071.513] SaveDC (hdc=0x1801089a) returned 1 [0071.513] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2f040872 [0071.513] GetClipRgn (hdc=0x1801089a, hrgn=0x2f040872) returned 0 [0071.514] SelectClipRgn (hdc=0x1801089a, hrgn=0x43040864) returned 2 [0071.514] DeleteObject (ho=0x2f040872) returned 1 [0071.514] DeleteObject (ho=0x43040864) returned 1 [0071.514] OffsetViewportOrgEx (in: hdc=0x1801089a, x=0, y=0, lppt=0x216c1f8 | out: lppt=0x216c1f8) returned 1 [0071.514] GetNearestColor (hdc=0x1801089a, color=0xa0) returned 0xa0 [0071.514] CreateSolidBrush (color=0xa0) returned 0x3e100860 [0071.514] FillRect (hDC=0x1801089a, lprc=0x14e1e8, hbr=0x3e100860) returned 1 [0071.514] DeleteObject (ho=0x3e100860) returned 1 [0071.514] RestoreDC (hdc=0x1801089a, nSavedDC=-1) returned 1 [0071.514] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x1801089a) returned 0x0 [0071.514] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd9e0dbd) returned 0x0 [0071.514] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0071.514] GetWindowTextLengthW (hWnd=0x10210) returned 24 [0071.514] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10210, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0071.514] GetSystemMetrics (nIndex=42) returned 0 [0071.514] GetWindowTextW (in: hWnd=0x10210, lpString=0x14e320, nMaxCount=25 | out: lpString="Your Files are Encrypted") returned 24 [0071.514] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10210, Msg=0xd, wParam=0x19, lParam=0x14e320) returned 0x18 [0071.514] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0071.514] GetCurrentObject (hdc=0x1801089a, type=0x1) returned 0x1b00017 [0071.514] GetCurrentObject (hdc=0x1801089a, type=0x2) returned 0x1900010 [0071.514] GetCurrentObject (hdc=0x1801089a, type=0x7) returned 0x29050250 [0071.515] GetCurrentObject (hdc=0x1801089a, type=0x6) returned 0x18a002e [0071.515] SaveDC (hdc=0x1801089a) returned 1 [0071.515] GetNearestColor (hdc=0x1801089a, color=0xffffff) returned 0xffffff [0071.515] RestoreDC (hdc=0x1801089a, nSavedDC=-1) returned 1 [0071.515] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x1801089a) returned 0x0 [0071.515] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0071.515] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0071.515] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0071.515] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0071.515] GetCurrentObject (hdc=0x1801089a, type=0x1) returned 0x1b00017 [0071.515] GetCurrentObject (hdc=0x1801089a, type=0x2) returned 0x1900010 [0071.515] GetCurrentObject (hdc=0x1801089a, type=0x7) returned 0x29050250 [0071.515] GetCurrentObject (hdc=0x1801089a, type=0x6) returned 0x18a002e [0071.515] SaveDC (hdc=0x1801089a) returned 1 [0071.515] GetTextAlign (hdc=0x1801089a) returned 0x0 [0071.515] GetTextColor (hdc=0x1801089a) returned 0x0 [0071.515] SetTextColor (hdc=0x1801089a, color=0xffffff) returned 0x0 [0071.516] GetCurrentObject (hdc=0x1801089a, type=0x6) returned 0x18a002e [0071.516] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0071.516] SelectObject (hdc=0x1801089a, h=0x160a0258) returned 0x18a002e [0071.516] GetBkMode (hdc=0x1801089a) returned 2 [0071.516] SetBkMode (hdc=0x1801089a, mode=1) returned 2 [0071.516] DrawTextExW (in: hdc=0x1801089a, lpchText="Your Files are Encrypted", cchText=24, lprc=0x14e1c8, format=0x100000, lpdtp=0x216cb00 | out: lpchText="Your Files are Encrypted", lprc=0x14e1c8) returned 23 [0071.518] RestoreDC (hdc=0x1801089a, nSavedDC=-1) returned 1 [0071.518] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x1801089a) returned 0x0 [0071.518] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0071.518] BitBlt (hdc=0xb010256, x=0, y=0, cx=216, cy=23, hdcSrc=0x1801089a, x1=0, y1=0, rop=0xcc0020) returned 1 [0071.518] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x1801089a) returned 0x0 [0071.518] SelectPalette (hdc=0xb010256, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0071.518] SelectObject (hdc=0x1801089a, h=0x185000f) returned 0x29050250 [0071.518] DeleteDC (hdc=0x1801089a) returned 1 [0071.518] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0071.518] EndPaint (hWnd=0x10210, lpPaint=0x14e448) returned 1 [0071.518] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.518] IsWindowUnicode (hWnd=0x10214) returned 1 [0071.518] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.518] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.518] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0071.518] BeginPaint (in: hWnd=0x10214, lpPaint=0x14e4e8 | out: lpPaint=0x14e4e8) returned 0x5010825 [0071.518] SelectPalette (hdc=0x5010825, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0071.518] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0071.519] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0071.519] GetSystemMetrics (nIndex=42) returned 0 [0071.519] GetWindowTextW (in: hWnd=0x10214, lpString=0x14e380, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0071.519] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14e380) returned 0xa [0071.519] SelectPalette (hdc=0x5010825, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0071.519] EndPaint (hWnd=0x10214, lpPaint=0x14e488) returned 1 [0071.519] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.519] IsWindowUnicode (hWnd=0x10216) returned 1 [0071.519] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.519] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.519] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0071.519] BeginPaint (in: hWnd=0x10216, lpPaint=0x14e478 | out: lpPaint=0x14e478) returned 0x5010830 [0071.519] EndPaint (hWnd=0x10216, lpPaint=0x14e418) returned 1 [0071.519] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.519] IsWindowUnicode (hWnd=0x10218) returned 1 [0071.519] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.519] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.519] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0071.519] BeginPaint (in: hWnd=0x10218, lpPaint=0x14e478 | out: lpPaint=0x14e478) returned 0xb010256 [0071.519] EndPaint (hWnd=0x10218, lpPaint=0x14e418) returned 1 [0071.520] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.520] IsWindowUnicode (hWnd=0x1021a) returned 1 [0071.520] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.520] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.520] DispatchMessageW (lpMsg=0x14edb0) returned 0x1 [0071.520] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021a, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0071.520] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.520] IsWindowUnicode (hWnd=0x1021c) returned 1 [0071.520] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.520] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.520] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0071.520] BeginPaint (in: hWnd=0x1021c, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0x5010830 [0071.520] EndPaint (hWnd=0x1021c, lpPaint=0x14e448) returned 1 [0071.520] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.520] IsWindowUnicode (hWnd=0x1021e) returned 1 [0071.520] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.520] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.520] DispatchMessageW (lpMsg=0x14edb0) returned 0x1 [0071.520] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0071.520] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0071.520] SetTextColor (hdc=0xb010256, color=0x0) returned 0x0 [0071.520] SetBkColor (hdc=0xb010256, color=0xffffff) returned 0xffffff [0071.521] GetWindowPlacement (in: hWnd=0x10214, lpwndpl=0x14d598 | out: lpwndpl=0x14d598) returned 1 [0071.521] GetClientRect (in: hWnd=0x10214, lpRect=0x14d4b0 | out: lpRect=0x14d4b0) returned 1 [0071.521] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0071.521] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0071.521] GetSystemMetrics (nIndex=42) returned 0 [0071.521] GetWindowTextW (in: hWnd=0x10214, lpString=0x14d210, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0071.521] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14d210) returned 0xa [0071.521] GetClientRect (in: hWnd=0x10214, lpRect=0x14d298 | out: lpRect=0x14d298) returned 1 [0071.521] GetCurrentObject (hdc=0x2001089a, type=0x1) returned 0x1b00017 [0071.521] GetCurrentObject (hdc=0x2001089a, type=0x2) returned 0x1900010 [0071.521] GetCurrentObject (hdc=0x2001089a, type=0x7) returned 0x19050862 [0071.521] GetCurrentObject (hdc=0x2001089a, type=0x6) returned 0x18a002e [0071.521] SaveDC (hdc=0x2001089a) returned 1 [0071.521] GetNearestColor (hdc=0x2001089a, color=0xa0) returned 0xa0 [0071.522] CreateSolidBrush (color=0xa0) returned 0x3f100860 [0071.522] FillRect (hDC=0x2001089a, lprc=0x14cf88, hbr=0x3f100860) returned 1 [0071.522] DeleteObject (ho=0x3f100860) returned 1 [0071.522] RestoreDC (hdc=0x2001089a, nSavedDC=-1) returned 1 [0071.522] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0071.522] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0071.522] GetSystemMetrics (nIndex=42) returned 0 [0071.522] GetWindowTextW (in: hWnd=0x10214, lpString=0x14d140, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0071.522] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14d140) returned 0xa [0071.522] GetClientRect (in: hWnd=0x10214, lpRect=0x14d1c8 | out: lpRect=0x14d1c8) returned 1 [0071.522] GetCurrentObject (hdc=0x2001089a, type=0x1) returned 0x1b00017 [0071.522] GetCurrentObject (hdc=0x2001089a, type=0x2) returned 0x1900010 [0071.522] GetCurrentObject (hdc=0x2001089a, type=0x7) returned 0x19050862 [0071.522] GetCurrentObject (hdc=0x2001089a, type=0x6) returned 0x18a002e [0071.522] SaveDC (hdc=0x2001089a) returned 1 [0071.522] GetNearestColor (hdc=0x2001089a, color=0xa0) returned 0xa0 [0071.522] CreateSolidBrush (color=0xa0) returned 0x40100860 [0071.522] FillRect (hDC=0x2001089a, lprc=0x14ceb8, hbr=0x40100860) returned 1 [0071.522] DeleteObject (ho=0x40100860) returned 1 [0071.522] RestoreDC (hdc=0x2001089a, nSavedDC=-1) returned 1 [0071.523] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0071.523] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0071.523] GetSystemMetrics (nIndex=42) returned 0 [0071.523] GetWindowTextW (in: hWnd=0x10214, lpString=0x14d140, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0071.523] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14d140) returned 0xa [0071.523] GetWindowPlacement (in: hWnd=0x10214, lpwndpl=0x14d598 | out: lpwndpl=0x14d598) returned 1 [0071.523] GetClientRect (in: hWnd=0x10214, lpRect=0x14d4b0 | out: lpRect=0x14d4b0) returned 1 [0071.523] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0071.523] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0071.523] GetSystemMetrics (nIndex=42) returned 0 [0071.523] GetWindowTextW (in: hWnd=0x10214, lpString=0x14d210, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0071.523] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14d210) returned 0xa [0071.523] GetClientRect (in: hWnd=0x10214, lpRect=0x14d298 | out: lpRect=0x14d298) returned 1 [0071.523] GetCurrentObject (hdc=0x270108a5, type=0x1) returned 0x1b00017 [0071.523] GetCurrentObject (hdc=0x270108a5, type=0x2) returned 0x1900010 [0071.523] GetCurrentObject (hdc=0x270108a5, type=0x7) returned 0xfffffffffa05025c [0071.523] GetCurrentObject (hdc=0x270108a5, type=0x6) returned 0x18a002e [0071.523] SaveDC (hdc=0x270108a5) returned 1 [0071.523] GetNearestColor (hdc=0x270108a5, color=0xa0) returned 0xa0 [0071.523] CreateSolidBrush (color=0xa0) returned 0x41100860 [0071.524] FillRect (hDC=0x270108a5, lprc=0x14cf88, hbr=0x41100860) returned 1 [0071.524] DeleteObject (ho=0x41100860) returned 1 [0071.524] RestoreDC (hdc=0x270108a5, nSavedDC=-1) returned 1 [0071.524] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0071.524] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0071.524] GetSystemMetrics (nIndex=42) returned 0 [0071.524] GetWindowTextW (in: hWnd=0x10214, lpString=0x14d140, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0071.524] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14d140) returned 0xa [0071.524] GetClientRect (in: hWnd=0x10214, lpRect=0x14d1c8 | out: lpRect=0x14d1c8) returned 1 [0071.524] GetCurrentObject (hdc=0x270108a5, type=0x1) returned 0x1b00017 [0071.524] GetCurrentObject (hdc=0x270108a5, type=0x2) returned 0x1900010 [0071.524] GetCurrentObject (hdc=0x270108a5, type=0x7) returned 0xfffffffffa05025c [0071.524] GetCurrentObject (hdc=0x270108a5, type=0x6) returned 0x18a002e [0071.524] SaveDC (hdc=0x270108a5) returned 1 [0071.524] GetNearestColor (hdc=0x270108a5, color=0xa0) returned 0xa0 [0071.524] CreateSolidBrush (color=0xa0) returned 0x42100860 [0071.524] FillRect (hDC=0x270108a5, lprc=0x14ceb8, hbr=0x42100860) returned 1 [0071.524] DeleteObject (ho=0x42100860) returned 1 [0071.524] RestoreDC (hdc=0x270108a5, nSavedDC=-1) returned 1 [0071.525] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0071.525] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0071.525] GetSystemMetrics (nIndex=42) returned 0 [0071.525] GetWindowTextW (in: hWnd=0x10214, lpString=0x14d140, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0071.525] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14d140) returned 0xa [0071.525] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.526] IsWindowUnicode (hWnd=0x10220) returned 1 [0071.526] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.526] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.526] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0071.526] BeginPaint (in: hWnd=0x10220, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0x5010825 [0071.526] EndPaint (hWnd=0x10220, lpPaint=0x14e448) returned 1 [0071.526] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.526] IsWindowUnicode (hWnd=0x301ee) returned 1 [0071.526] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.526] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.526] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0071.527] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0071.527] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0071.527] CoTaskMemFree (pv=0xa692f0) [0071.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0071.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0071.527] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0071.527] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0071.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0071.528] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0071.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e500) returned 1 [0071.528] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0071.528] GetFileType (hFile=0x270) returned 0x1 [0071.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e470) returned 1 [0071.528] GetFileType (hFile=0x270) returned 0x1 [0071.528] ReadFile (in: hFile=0x270, lpBuffer=0x216fb48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x216fb48*, lpNumberOfBytesRead=0x14e5d8*=0x1, lpOverlapped=0x0) returned 1 [0071.528] ReadFile (in: hFile=0x270, lpBuffer=0x216fb48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x216fb48*, lpNumberOfBytesRead=0x14e5d8*=0x0, lpOverlapped=0x0) returned 1 [0071.528] CloseHandle (hObject=0x270) returned 1 [0071.529] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0071.530] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0071.530] CoTaskMemFree (pv=0xa692f0) [0071.530] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0071.530] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0071.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0071.530] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0071.530] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0071.530] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0071.530] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e4c0) returned 1 [0071.530] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0071.531] GetFileType (hFile=0x270) returned 0x1 [0071.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e430) returned 1 [0071.531] GetFileType (hFile=0x270) returned 0x1 [0071.531] WriteFile (in: hFile=0x270, lpBuffer=0x2172e98*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x14e508, lpOverlapped=0x0 | out: lpBuffer=0x2172e98*, lpNumberOfBytesWritten=0x14e508*=0x1, lpOverlapped=0x0) returned 1 [0071.532] CloseHandle (hObject=0x270) returned 1 [0071.533] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0071.533] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0071.533] GetSystemMetrics (nIndex=42) returned 0 [0071.533] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e600, nMaxCount=5 | out: lpString="4:57") returned 4 [0071.533] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e600) returned 0x4 [0071.533] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0071.533] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0071.533] GetSystemMetrics (nIndex=42) returned 0 [0071.533] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e5a0, nMaxCount=5 | out: lpString="4:57") returned 4 [0071.533] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e5a0) returned 0x4 [0071.533] SetWindowTextW (hWnd=0x201da, lpString="4:56") returned 1 [0071.533] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xc, wParam=0x0, lParam=0x2170bbc) returned 0x1 [0071.533] GetStockObject (i=5) returned 0x1900015 [0071.533] GetDlgItem (hDlg=0x401fa, nIDDlgItem=131546) returned 0x201da [0071.533] SendMessageW (hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0071.533] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0071.534] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0071.534] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0071.534] GetSystemMetrics (nIndex=42) returned 0 [0071.534] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e460, nMaxCount=5 | out: lpString="4:56") returned 4 [0071.534] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e460) returned 0x4 [0071.534] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0071.534] AdjustWindowRectEx (in: lpRect=0x14e478, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e478) returned 1 [0071.534] SelectObject (hdc=0x8010893, h=0x200a0899) returned 0x120a086d [0071.534] DrawTextExW (in: hdc=0x8010893, lpchText="4:56", cchText=4, lprc=0x14e3e8, format=0x102400, lpdtp=0x2174150 | out: lpchText="4:56", lprc=0x14e3e8) returned 20 [0071.534] InvalidateRect (hWnd=0x201da, lpRect=0x0, bErase=1) returned 1 [0071.534] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0071.534] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0071.534] GetSystemMetrics (nIndex=42) returned 0 [0071.534] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14e3d0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0071.534] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14e3d0) returned 0xc [0071.535] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.535] IsWindowUnicode (hWnd=0x201da) returned 1 [0071.535] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.535] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.535] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0071.535] BeginPaint (in: hWnd=0x201da, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0x5010830 [0071.535] SelectPalette (hdc=0x5010830, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0071.535] CreateCompatibleDC (hdc=0x5010830) returned 0x12010897 [0071.535] SelectObject (hdc=0x12010897, h=0x29050250) returned 0x185000f [0071.535] GdipCreateFromHDC (hdc=0x12010897, graphics=0x14e428) returned 0x0 [0071.535] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0071.535] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=40, height=20, combineMode=0x0) returned 0x0 [0071.535] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0071.535] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0071.535] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14e4b8) returned 0x0 [0071.535] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0071.535] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0071.535] LocalFree (hMem=0xa931f0) returned 0x0 [0071.536] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0071.536] GdipCreateRegion (region=0x14e450) returned 0x0 [0071.536] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0071.536] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0071.536] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0071.536] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0071.536] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0071.536] GetSystemMetrics (nIndex=42) returned 0 [0071.536] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:56") returned 4 [0071.536] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0071.536] GetClientRect (in: hWnd=0x201da, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0071.536] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0071.536] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0071.536] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0071.536] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0071.536] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0071.536] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0071.536] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0071.536] LocalFree (hMem=0xa931f0) returned 0x0 [0071.536] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0071.536] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0071.536] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0071.536] LocalFree (hMem=0xa931f0) returned 0x0 [0071.537] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0071.537] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0071.537] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0071.537] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0071.537] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0071.537] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0071.537] GetCurrentObject (hdc=0x12010897, type=0x1) returned 0x1b00017 [0071.537] GetCurrentObject (hdc=0x12010897, type=0x2) returned 0x1900010 [0071.537] GetCurrentObject (hdc=0x12010897, type=0x7) returned 0x29050250 [0071.537] GetCurrentObject (hdc=0x12010897, type=0x6) returned 0x18a002e [0071.537] SaveDC (hdc=0x12010897) returned 1 [0071.537] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x45040864 [0071.537] GetClipRgn (hdc=0x12010897, hrgn=0x45040864) returned 0 [0071.537] SelectClipRgn (hdc=0x12010897, hrgn=0x35040872) returned 2 [0071.537] DeleteObject (ho=0x45040864) returned 1 [0071.537] DeleteObject (ho=0x35040872) returned 1 [0071.537] OffsetViewportOrgEx (in: hdc=0x12010897, x=0, y=0, lppt=0x2174850 | out: lppt=0x2174850) returned 1 [0071.537] GetNearestColor (hdc=0x12010897, color=0xa0) returned 0xa0 [0071.537] CreateSolidBrush (color=0xa0) returned 0x43100860 [0071.537] FillRect (hDC=0x12010897, lprc=0x14e1e8, hbr=0x43100860) returned 1 [0071.537] DeleteObject (ho=0x43100860) returned 1 [0071.538] RestoreDC (hdc=0x12010897, nSavedDC=-1) returned 1 [0071.538] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x12010897) returned 0x0 [0071.538] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd9c0dbd) returned 0x0 [0071.538] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0071.538] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0071.538] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0071.538] GetSystemMetrics (nIndex=42) returned 0 [0071.538] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:56") returned 4 [0071.538] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0071.538] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0071.538] GetCurrentObject (hdc=0x12010897, type=0x1) returned 0x1b00017 [0071.538] GetCurrentObject (hdc=0x12010897, type=0x2) returned 0x1900010 [0071.538] GetCurrentObject (hdc=0x12010897, type=0x7) returned 0x29050250 [0071.538] GetCurrentObject (hdc=0x12010897, type=0x6) returned 0x18a002e [0071.538] SaveDC (hdc=0x12010897) returned 1 [0071.538] GetNearestColor (hdc=0x12010897, color=0xffffff) returned 0xffffff [0071.538] RestoreDC (hdc=0x12010897, nSavedDC=-1) returned 1 [0071.538] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x12010897) returned 0x0 [0071.539] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0071.539] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0071.539] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0071.539] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0071.539] GetCurrentObject (hdc=0x12010897, type=0x1) returned 0x1b00017 [0071.539] GetCurrentObject (hdc=0x12010897, type=0x2) returned 0x1900010 [0071.539] GetCurrentObject (hdc=0x12010897, type=0x7) returned 0x29050250 [0071.539] GetCurrentObject (hdc=0x12010897, type=0x6) returned 0x18a002e [0071.539] SaveDC (hdc=0x12010897) returned 1 [0071.539] GetTextAlign (hdc=0x12010897) returned 0x0 [0071.539] GetTextColor (hdc=0x12010897) returned 0x0 [0071.539] SetTextColor (hdc=0x12010897, color=0xffffff) returned 0x0 [0071.539] GetCurrentObject (hdc=0x12010897, type=0x6) returned 0x18a002e [0071.539] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0071.539] SelectObject (hdc=0x12010897, h=0x200a0899) returned 0x18a002e [0071.539] GetBkMode (hdc=0x12010897) returned 2 [0071.539] SetBkMode (hdc=0x12010897, mode=1) returned 2 [0071.539] DrawTextExW (in: hdc=0x12010897, lpchText="4:56", cchText=4, lprc=0x14e1c8, format=0x100000, lpdtp=0x21750e0 | out: lpchText="4:56", lprc=0x14e1c8) returned 20 [0071.540] RestoreDC (hdc=0x12010897, nSavedDC=-1) returned 1 [0071.540] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x12010897) returned 0x0 [0071.540] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0071.540] BitBlt (hdc=0x5010830, x=0, y=0, cx=40, cy=20, hdcSrc=0x12010897, x1=0, y1=0, rop=0xcc0020) returned 1 [0071.540] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x12010897) returned 0x0 [0071.540] SelectPalette (hdc=0x5010830, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0071.540] SelectObject (hdc=0x12010897, h=0x185000f) returned 0x29050250 [0071.540] DeleteDC (hdc=0x12010897) returned 1 [0071.540] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0071.540] EndPaint (hWnd=0x201da, lpPaint=0x14e448) returned 1 [0071.540] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.540] IsWindowUnicode (hWnd=0x1021e) returned 1 [0071.540] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.540] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.541] DispatchMessageW (lpMsg=0x14edb0) returned 0x1 [0071.667] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0071.667] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0x85, wParam=0xf040863, lParam=0x0) returned 0x1 [0071.667] SetTextColor (hdc=0xb010256, color=0x0) returned 0x0 [0071.667] SetBkColor (hdc=0xb010256, color=0xffffff) returned 0xffffff [0071.668] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.668] IsWindowUnicode (hWnd=0x1020c) returned 1 [0071.668] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.668] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.668] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0071.668] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.668] IsWindowUnicode (hWnd=0x1020c) returned 1 [0071.668] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.668] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.668] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0071.668] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x2a1, wParam=0x0, lParam=0xb00a6) returned 0x0 [0071.668] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.668] IsWindowUnicode (hWnd=0x201ec) returned 1 [0071.668] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.668] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.668] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0071.669] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.669] IsWindowUnicode (hWnd=0x1021e) returned 1 [0071.669] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.669] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.669] DispatchMessageW (lpMsg=0x14edb0) returned 0x20186 [0071.669] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0071.669] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0x85, wParam=0x1204088e, lParam=0x0) returned 0x1 [0071.669] SetTextColor (hdc=0x5010830, color=0x0) returned 0x0 [0071.669] SetBkColor (hdc=0x5010830, color=0xffffff) returned 0xffffff [0071.670] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.670] IsWindowUnicode (hWnd=0x1021e) returned 1 [0071.670] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.670] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.670] DispatchMessageW (lpMsg=0x14edb0) returned 0x1 [0071.670] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0071.670] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0x85, wParam=0x17040897, lParam=0x0) returned 0x1 [0071.670] SetTextColor (hdc=0xb010256, color=0x0) returned 0x0 [0071.670] SetBkColor (hdc=0xb010256, color=0xffffff) returned 0xffffff [0071.670] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0071.671] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0071.671] WaitMessage () returned 1 [0071.712] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.712] IsWindowUnicode (hWnd=0x1021e) returned 1 [0071.712] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.712] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.712] DispatchMessageW (lpMsg=0x14edb0) returned 0x1 [0071.713] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0071.713] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0x85, wParam=0x16040863, lParam=0x0) returned 0x1 [0071.713] SetTextColor (hdc=0x5010830, color=0x0) returned 0x0 [0071.713] SetBkColor (hdc=0x5010830, color=0xffffff) returned 0xffffff [0071.713] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0071.713] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0071.713] WaitMessage () returned 1 [0071.743] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.744] IsWindowUnicode (hWnd=0x201e6) returned 1 [0071.744] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.744] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.744] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0071.744] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0071.744] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0071.744] WaitMessage () returned 1 [0071.775] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.775] IsWindowUnicode (hWnd=0x1021e) returned 1 [0071.775] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0071.775] TranslateMessage (lpMsg=0x14edb0) returned 0 [0071.775] DispatchMessageW (lpMsg=0x14edb0) returned 0x201f3 [0071.775] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0071.775] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0x85, wParam=0x1904088e, lParam=0x0) returned 0x1 [0071.775] SetTextColor (hdc=0xb010256, color=0x0) returned 0x0 [0071.775] SetBkColor (hdc=0xb010256, color=0xffffff) returned 0xffffff [0071.776] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0071.776] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0071.776] WaitMessage () returned 1 [0072.243] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0072.243] IsWindowUnicode (hWnd=0x301ee) returned 1 [0072.243] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0072.243] TranslateMessage (lpMsg=0x14edb0) returned 0 [0072.243] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0072.244] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0072.244] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0072.244] CoTaskMemFree (pv=0xa692f0) [0072.244] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0072.244] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0072.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0072.244] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0072.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0072.244] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0072.244] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e500) returned 1 [0072.244] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0072.244] GetFileType (hFile=0x270) returned 0x1 [0072.244] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e470) returned 1 [0072.244] GetFileType (hFile=0x270) returned 0x1 [0072.244] ReadFile (in: hFile=0x270, lpBuffer=0x2176d20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x2176d20*, lpNumberOfBytesRead=0x14e5d8*=0x1, lpOverlapped=0x0) returned 1 [0072.244] ReadFile (in: hFile=0x270, lpBuffer=0x2176d20, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x2176d20*, lpNumberOfBytesRead=0x14e5d8*=0x0, lpOverlapped=0x0) returned 1 [0072.244] CloseHandle (hObject=0x270) returned 1 [0072.245] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0072.245] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0072.245] CoTaskMemFree (pv=0xa692f0) [0072.245] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0072.246] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0072.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0072.246] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0072.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0072.246] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0072.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e4c0) returned 1 [0072.246] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0072.247] GetFileType (hFile=0x270) returned 0x1 [0072.247] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e430) returned 1 [0072.247] GetFileType (hFile=0x270) returned 0x1 [0072.247] WriteFile (in: hFile=0x270, lpBuffer=0x217a070*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x14e508, lpOverlapped=0x0 | out: lpBuffer=0x217a070*, lpNumberOfBytesWritten=0x14e508*=0x1, lpOverlapped=0x0) returned 1 [0072.247] CloseHandle (hObject=0x270) returned 1 [0072.248] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0072.248] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0072.248] GetSystemMetrics (nIndex=42) returned 0 [0072.248] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e600, nMaxCount=5 | out: lpString="4:56") returned 4 [0072.248] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e600) returned 0x4 [0072.248] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0072.248] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0072.248] GetSystemMetrics (nIndex=42) returned 0 [0072.248] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e5a0, nMaxCount=5 | out: lpString="4:56") returned 4 [0072.248] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e5a0) returned 0x4 [0072.248] SetWindowTextW (hWnd=0x201da, lpString="4:55") returned 1 [0072.248] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xc, wParam=0x0, lParam=0x2177d94) returned 0x1 [0072.249] GetStockObject (i=5) returned 0x1900015 [0072.249] GetDlgItem (hDlg=0x401fa, nIDDlgItem=131546) returned 0x201da [0072.249] SendMessageW (hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0072.249] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0072.249] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0072.249] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0072.249] GetSystemMetrics (nIndex=42) returned 0 [0072.249] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e460, nMaxCount=5 | out: lpString="4:55") returned 4 [0072.249] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e460) returned 0x4 [0072.249] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0072.249] AdjustWindowRectEx (in: lpRect=0x14e478, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e478) returned 1 [0072.249] DrawTextExW (in: hdc=0x8010893, lpchText="4:55", cchText=4, lprc=0x14e3e8, format=0x102400, lpdtp=0x217b328 | out: lpchText="4:55", lprc=0x14e3e8) returned 20 [0072.249] InvalidateRect (hWnd=0x201da, lpRect=0x0, bErase=1) returned 1 [0072.249] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0072.249] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0072.249] GetSystemMetrics (nIndex=42) returned 0 [0072.249] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14e3d0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0072.249] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14e3d0) returned 0xc [0072.250] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0072.250] IsWindowUnicode (hWnd=0x201da) returned 1 [0072.250] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0072.250] TranslateMessage (lpMsg=0x14edb0) returned 0 [0072.250] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0072.250] BeginPaint (in: hWnd=0x201da, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0x5010825 [0072.250] SelectPalette (hdc=0x5010825, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0072.250] CreateCompatibleDC (hdc=0x5010825) returned 0x1d01088e [0072.250] SelectObject (hdc=0x1d01088e, h=0x29050250) returned 0x185000f [0072.250] GdipCreateFromHDC (hdc=0x1d01088e, graphics=0x14e428) returned 0x0 [0072.250] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0072.250] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=40, height=20, combineMode=0x0) returned 0x0 [0072.250] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0072.250] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0072.250] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14e4b8) returned 0x0 [0072.250] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0072.250] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0072.250] LocalFree (hMem=0xa931f0) returned 0x0 [0072.250] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0072.250] GdipCreateRegion (region=0x14e450) returned 0x0 [0072.250] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0072.250] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0072.250] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0072.250] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0072.250] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0072.251] GetSystemMetrics (nIndex=42) returned 0 [0072.251] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:55") returned 4 [0072.251] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0072.251] GetClientRect (in: hWnd=0x201da, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0072.251] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0072.251] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0072.251] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0072.251] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0072.251] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0072.251] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0072.251] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0072.251] LocalFree (hMem=0xa931f0) returned 0x0 [0072.251] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0072.251] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0072.251] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0072.251] LocalFree (hMem=0xa931f0) returned 0x0 [0072.251] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0072.251] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0072.251] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0072.251] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0072.251] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0072.251] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0072.251] GetCurrentObject (hdc=0x1d01088e, type=0x1) returned 0x1b00017 [0072.251] GetCurrentObject (hdc=0x1d01088e, type=0x2) returned 0x1900010 [0072.251] GetCurrentObject (hdc=0x1d01088e, type=0x7) returned 0x29050250 [0072.251] GetCurrentObject (hdc=0x1d01088e, type=0x6) returned 0x18a002e [0072.251] SaveDC (hdc=0x1d01088e) returned 1 [0072.251] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4c040864 [0072.251] GetClipRgn (hdc=0x1d01088e, hrgn=0x4c040864) returned 0 [0072.251] SelectClipRgn (hdc=0x1d01088e, hrgn=0x1504086f) returned 2 [0072.252] DeleteObject (ho=0x4c040864) returned 1 [0072.252] DeleteObject (ho=0x1504086f) returned 1 [0072.252] OffsetViewportOrgEx (in: hdc=0x1d01088e, x=0, y=0, lppt=0x217ba28 | out: lppt=0x217ba28) returned 1 [0072.252] GetNearestColor (hdc=0x1d01088e, color=0xa0) returned 0xa0 [0072.252] CreateSolidBrush (color=0xa0) returned 0x44100860 [0072.252] FillRect (hDC=0x1d01088e, lprc=0x14e1e8, hbr=0x44100860) returned 1 [0072.252] DeleteObject (ho=0x44100860) returned 1 [0072.252] RestoreDC (hdc=0x1d01088e, nSavedDC=-1) returned 1 [0072.252] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x1d01088e) returned 0x0 [0072.252] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd9a0dbd) returned 0x0 [0072.252] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0072.252] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0072.252] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0072.252] GetSystemMetrics (nIndex=42) returned 0 [0072.252] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:55") returned 4 [0072.252] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0072.252] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0072.252] GetCurrentObject (hdc=0x1d01088e, type=0x1) returned 0x1b00017 [0072.252] GetCurrentObject (hdc=0x1d01088e, type=0x2) returned 0x1900010 [0072.252] GetCurrentObject (hdc=0x1d01088e, type=0x7) returned 0x29050250 [0072.252] GetCurrentObject (hdc=0x1d01088e, type=0x6) returned 0x18a002e [0072.252] SaveDC (hdc=0x1d01088e) returned 1 [0072.252] GetNearestColor (hdc=0x1d01088e, color=0xffffff) returned 0xffffff [0072.252] RestoreDC (hdc=0x1d01088e, nSavedDC=-1) returned 1 [0072.252] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x1d01088e) returned 0x0 [0072.253] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0072.253] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0072.253] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0072.253] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0072.253] GetCurrentObject (hdc=0x1d01088e, type=0x1) returned 0x1b00017 [0072.253] GetCurrentObject (hdc=0x1d01088e, type=0x2) returned 0x1900010 [0072.253] GetCurrentObject (hdc=0x1d01088e, type=0x7) returned 0x29050250 [0072.253] GetCurrentObject (hdc=0x1d01088e, type=0x6) returned 0x18a002e [0072.253] SaveDC (hdc=0x1d01088e) returned 1 [0072.253] GetTextAlign (hdc=0x1d01088e) returned 0x0 [0072.253] GetTextColor (hdc=0x1d01088e) returned 0x0 [0072.253] SetTextColor (hdc=0x1d01088e, color=0xffffff) returned 0x0 [0072.253] GetCurrentObject (hdc=0x1d01088e, type=0x6) returned 0x18a002e [0072.253] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0072.253] SelectObject (hdc=0x1d01088e, h=0x200a0899) returned 0x18a002e [0072.253] GetBkMode (hdc=0x1d01088e) returned 2 [0072.253] SetBkMode (hdc=0x1d01088e, mode=1) returned 2 [0072.253] DrawTextExW (in: hdc=0x1d01088e, lpchText="4:55", cchText=4, lprc=0x14e1c8, format=0x100000, lpdtp=0x217c2b8 | out: lpchText="4:55", lprc=0x14e1c8) returned 20 [0072.253] RestoreDC (hdc=0x1d01088e, nSavedDC=-1) returned 1 [0072.253] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x1d01088e) returned 0x0 [0072.253] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0072.253] BitBlt (hdc=0x5010825, x=0, y=0, cx=40, cy=20, hdcSrc=0x1d01088e, x1=0, y1=0, rop=0xcc0020) returned 1 [0072.254] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x1d01088e) returned 0x0 [0072.254] SelectPalette (hdc=0x5010825, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0072.254] SelectObject (hdc=0x1d01088e, h=0x185000f) returned 0x29050250 [0072.254] DeleteDC (hdc=0x1d01088e) returned 1 [0072.254] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0072.254] EndPaint (hWnd=0x201da, lpPaint=0x14e448) returned 1 [0072.254] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0072.254] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0072.254] WaitMessage () returned 1 [0072.681] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0072.681] IsWindowUnicode (hWnd=0x1020c) returned 1 [0072.681] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0072.682] GetKeyState (nVirtKey=16) returned 0 [0072.682] GetKeyState (nVirtKey=17) returned 0 [0072.682] GetKeyState (nVirtKey=18) returned -127 [0072.683] SendMessageW (hWnd=0x1020c, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0072.683] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x3 [0072.683] GetParent (hWnd=0x401fa) returned 0x0 [0072.683] SendMessageW (hWnd=0x401fa, Msg=0x127, wParam=0x20002, lParam=0x0) returned 0x0 [0072.683] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x127, wParam=0x20002, lParam=0x0) returned 0x0 [0072.683] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0072.683] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301fc, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0072.683] GetStockObject (i=5) returned 0x1900015 [0072.683] GetStockObject (i=5) returned 0x1900015 [0072.683] GetDlgItem (hDlg=0x401fa, nIDDlgItem=197116) returned 0x301fc [0072.683] SendMessageW (hWnd=0x301fc, Msg=0x202b, wParam=0x301fc, lParam=0x14ced0) returned 0x0 [0072.683] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301fc, Msg=0x202b, wParam=0x301fc, lParam=0x14ced0) returned 0x0 [0072.683] RedrawWindow (hWnd=0x301fc, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0072.683] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0072.683] GetStockObject (i=5) returned 0x1900015 [0072.683] GetDlgItem (hDlg=0x401fa, nIDDlgItem=131546) returned 0x201da [0072.683] SendMessageW (hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14d080) returned 0x0 [0072.683] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14d080) returned 0x0 [0072.683] RedrawWindow (hWnd=0x201da, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0072.683] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201dc, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0072.684] GetStockObject (i=5) returned 0x1900015 [0072.684] GetDlgItem (hDlg=0x401fa, nIDDlgItem=131548) returned 0x201dc [0072.684] SendMessageW (hWnd=0x201dc, Msg=0x202b, wParam=0x201dc, lParam=0x14d080) returned 0x0 [0072.684] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201dc, Msg=0x202b, wParam=0x201dc, lParam=0x14d080) returned 0x0 [0072.684] RedrawWindow (hWnd=0x201dc, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0072.684] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10206, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0072.684] GetStockObject (i=5) returned 0x1900015 [0072.684] GetDlgItem (hDlg=0x401fa, nIDDlgItem=66054) returned 0x10206 [0072.684] SendMessageW (hWnd=0x10206, Msg=0x202b, wParam=0x10206, lParam=0x14d080) returned 0x0 [0072.684] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10206, Msg=0x202b, wParam=0x10206, lParam=0x14d080) returned 0x0 [0072.684] RedrawWindow (hWnd=0x10206, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0072.684] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10208, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0072.684] GetStockObject (i=5) returned 0x1900015 [0072.684] GetDlgItem (hDlg=0x401fa, nIDDlgItem=66056) returned 0x10208 [0072.684] SendMessageW (hWnd=0x10208, Msg=0x202b, wParam=0x10208, lParam=0x14d080) returned 0x0 [0072.684] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10208, Msg=0x202b, wParam=0x10208, lParam=0x14d080) returned 0x0 [0072.684] RedrawWindow (hWnd=0x10208, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0072.685] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020a, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0072.685] RedrawWindow (hWnd=0x1020a, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0072.685] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0072.685] GetStockObject (i=5) returned 0x1900015 [0072.685] GetStockObject (i=5) returned 0x1900015 [0072.685] GetDlgItem (hDlg=0x401fa, nIDDlgItem=66060) returned 0x1020c [0072.685] SendMessageW (hWnd=0x1020c, Msg=0x202b, wParam=0x1020c, lParam=0x14ced0) returned 0x0 [0072.685] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x202b, wParam=0x1020c, lParam=0x14ced0) returned 0x0 [0072.685] RedrawWindow (hWnd=0x1020c, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0072.685] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020e, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0072.685] RedrawWindow (hWnd=0x1020e, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0072.685] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10210, Msg=0x128, wParam=0x20002, lParam=0x0) returned 0x0 [0072.685] GetStockObject (i=5) returned 0x1900015 [0072.685] GetDlgItem (hDlg=0x401fa, nIDDlgItem=66064) returned 0x10210 [0072.685] SendMessageW (hWnd=0x10210, Msg=0x202b, wParam=0x10210, lParam=0x14d080) returned 0x0 [0072.685] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10210, Msg=0x202b, wParam=0x10210, lParam=0x14d080) returned 0x0 [0072.685] RedrawWindow (hWnd=0x10210, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0072.685] RedrawWindow (hWnd=0x401fa, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0072.736] GetKeyState (nVirtKey=16) returned 0 [0072.736] GetKeyState (nVirtKey=17) returned 0 [0072.736] GetKeyState (nVirtKey=18) returned -127 [0074.182] TranslateMessage (lpMsg=0x14edb0) returned 1 [0074.182] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0074.527] GetKeyState (nVirtKey=16) returned 0 [0074.527] GetKeyState (nVirtKey=17) returned 0 [0074.527] GetKeyState (nVirtKey=18) returned -127 [0074.527] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0 [0074.527] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.527] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0074.528] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0074.528] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0074.528] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0074.529] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x46, wParam=0x0, lParam=0x14ebf0) returned 0x0 [0074.529] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x285032c) returned 0x1 [0074.529] IsWindowUnicode (hWnd=0x1020c) returned 1 [0074.529] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.529] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x285032c) returned 0x1 [0074.529] SetCursor (hCursor=0x10003) returned 0x10003 [0074.529] TranslateMessage (lpMsg=0x14edb0) returned 0 [0074.529] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0074.529] GetKeyState (nVirtKey=1) returned 0 [0074.529] GetKeyState (nVirtKey=2) returned 0 [0074.529] GetKeyState (nVirtKey=4) returned 0 [0074.529] GetKeyState (nVirtKey=5) returned 0 [0074.529] GetKeyState (nVirtKey=6) returned 0 [0074.529] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.529] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x285032c) returned 0x1 [0074.530] IsWindowUnicode (hWnd=0x1020c) returned 1 [0074.530] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.530] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x285032c) returned 0x1 [0074.530] GetDlgItem (hDlg=0x401fa, nIDDlgItem=0) returned 0x0 [0074.530] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x210, wParam=0x201, lParam=0x1b80185) returned 0x0 [0074.530] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x21, wParam=0x401fa, lParam=0x2010001) returned 0x1 [0074.530] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x21, wParam=0x401fa, lParam=0x2010001) returned 0x1 [0074.530] SetCursor (hCursor=0x10003) returned 0x10003 [0074.530] TranslateMessage (lpMsg=0x14edb0) returned 0 [0074.530] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0074.530] GetKeyState (nVirtKey=1) returned -127 [0074.530] GetKeyState (nVirtKey=2) returned 0 [0074.530] GetKeyState (nVirtKey=4) returned 0 [0074.530] GetKeyState (nVirtKey=5) returned 0 [0074.530] GetKeyState (nVirtKey=6) returned 0 [0074.530] IsWindowVisible (hWnd=0x1020c) returned 1 [0074.530] IsWindowEnabled (hWnd=0x1020c) returned 1 [0074.530] SetFocus (hWnd=0x1020c) returned 0x1020c [0074.530] GetFocus () returned 0x1020c [0074.530] GetFocus () returned 0x1020c [0074.530] GetFocus () returned 0x1020c [0074.530] GetKeyState (nVirtKey=1) returned -127 [0074.530] GetKeyState (nVirtKey=2) returned 0 [0074.530] GetKeyState (nVirtKey=4) returned 0 [0074.530] GetKeyState (nVirtKey=5) returned 0 [0074.530] GetKeyState (nVirtKey=6) returned 0 [0074.530] GetCapture () returned 0x0 [0074.530] SetCapture (hWnd=0x1020c) returned 0x0 [0074.530] GetKeyState (nVirtKey=1) returned -127 [0074.531] GetKeyState (nVirtKey=2) returned 0 [0074.531] GetKeyState (nVirtKey=4) returned 0 [0074.531] GetKeyState (nVirtKey=5) returned 0 [0074.531] GetKeyState (nVirtKey=6) returned 0 [0074.531] NotifyWinEvent (event=0x800a, hwnd=0x1020c, idObject=-4, idChild=0) [0074.531] InvalidateRect (hWnd=0x1020c, lpRect=0x14e6f0, bErase=0) returned 1 [0074.531] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.531] GetMessageA (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.531] TranslateMessage (lpMsg=0x14edb0) returned 0 [0074.531] DispatchMessageA (lpMsg=0x14edb0) returned 0x0 [0074.531] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.531] IsWindowUnicode (hWnd=0x1020c) returned 1 [0074.531] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.531] TranslateMessage (lpMsg=0x14edb0) returned 0 [0074.531] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0074.531] MapWindowPoints (in: hWndFrom=0x1020c, hWndTo=0x0, lpPoints=0x217c8e8, cPoints=0x1 | out: lpPoints=0x217c8e8) returned 41353803 [0074.531] NotifyWinEvent (event=0x800a, hwnd=0x1020c, idObject=-4, idChild=0) [0074.531] InvalidateRect (hWnd=0x1020c, lpRect=0x14e680, bErase=0) returned 1 [0074.532] UpdateWindow (hWnd=0x1020c) returned 1 [0074.532] BeginPaint (in: hWnd=0x1020c, lpPaint=0x14ddf8 | out: lpPaint=0x14ddf8) returned 0x5010830 [0074.532] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.532] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x14, wParam=0x5010830, lParam=0x0) returned 0x1 [0074.532] GetStockObject (i=5) returned 0x1900015 [0074.533] SelectPalette (hdc=0x5010830, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0074.533] CreateCompatibleDC (hdc=0x5010830) returned 0x5c010722 [0074.533] SelectObject (hdc=0x5c010722, h=0x29050250) returned 0x185000f [0074.533] GdipCreateFromHDC (hdc=0x5c010722, graphics=0x14dd78) returned 0x0 [0074.533] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0074.533] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=408, height=23, combineMode=0x0) returned 0x0 [0074.533] GdipCreateMatrix (matrix=0x14dda0) returned 0x0 [0074.533] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0074.533] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14de08) returned 0x0 [0074.533] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.533] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0074.533] LocalFree (hMem=0xa931f0) returned 0x0 [0074.533] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0074.533] GdipCreateRegion (region=0x14dda0) returned 0x0 [0074.533] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0074.533] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14de00) returned 0x0 [0074.533] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14dea0) returned 0x0 [0074.534] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd980dbd) returned 0x0 [0074.534] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0074.534] GdipGetDC (graphics=0x1afd81d0, hdc=0x14db18) returned 0x0 [0074.534] GetCurrentObject (hdc=0x5c010722, type=0x1) returned 0x1b00017 [0074.534] GetCurrentObject (hdc=0x5c010722, type=0x2) returned 0x1900010 [0074.534] GetCurrentObject (hdc=0x5c010722, type=0x7) returned 0x29050250 [0074.534] GetCurrentObject (hdc=0x5c010722, type=0x6) returned 0x18a002e [0074.534] SaveDC (hdc=0x5c010722) returned 1 [0074.534] GetNearestColor (hdc=0x5c010722, color=0xa0) returned 0xa0 [0074.534] GetNearestColor (hdc=0x5c010722, color=0x35) returned 0x35 [0074.534] GetNearestColor (hdc=0x5c010722, color=0x0) returned 0x0 [0074.534] GetNearestColor (hdc=0x5c010722, color=0x4848e5) returned 0x4848e5 [0074.534] GetNearestColor (hdc=0x5c010722, color=0x0) returned 0x0 [0074.534] GetNearestColor (hdc=0x5c010722, color=0x5151ff) returned 0x5151ff [0074.534] GetNearestColor (hdc=0x5c010722, color=0x4848e5) returned 0x4848e5 [0074.534] GetNearestColor (hdc=0x5c010722, color=0xc0) returned 0xc0 [0074.534] GetNearestColor (hdc=0x5c010722, color=0x0) returned 0x0 [0074.534] RestoreDC (hdc=0x5c010722, nSavedDC=-1) returned 1 [0074.534] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x5c010722) returned 0x0 [0074.535] IsAppThemed () returned 0x1 [0074.535] GetThemeAppProperties () returned 0x3 [0074.535] GetThemeAppProperties () returned 0x3 [0074.535] IsAppThemed () returned 0x1 [0074.535] GetThemeAppProperties () returned 0x3 [0074.535] GetThemeAppProperties () returned 0x3 [0074.535] SelectObject (hdc=0x8010893, h=0x120a086d) returned 0x200a0899 [0074.535] DrawTextExW (in: hdc=0x8010893, lpchText="Check", cchText=5, lprc=0x14d788, format=0x2415, lpdtp=0x217d410 | out: lpchText="Check", lprc=0x14d788) returned 13 [0074.535] IsAppThemed () returned 0x1 [0074.535] GetThemeAppProperties () returned 0x3 [0074.535] GetThemeAppProperties () returned 0x3 [0074.535] IsAppThemed () returned 0x1 [0074.535] GetThemeAppProperties () returned 0x3 [0074.535] GetThemeAppProperties () returned 0x3 [0074.535] IsAppThemed () returned 0x1 [0074.535] GetThemeAppProperties () returned 0x3 [0074.535] GetThemeAppProperties () returned 0x3 [0074.535] IsAppThemed () returned 0x1 [0074.535] GetThemeAppProperties () returned 0x3 [0074.535] GetThemeAppProperties () returned 0x3 [0074.535] IsThemePartDefined () returned 0x1 [0074.535] IsAppThemed () returned 0x1 [0074.535] GetThemeAppProperties () returned 0x3 [0074.535] GetThemeAppProperties () returned 0x3 [0074.535] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0074.535] IsAppThemed () returned 0x1 [0074.535] GetThemeAppProperties () returned 0x3 [0074.535] GetThemeAppProperties () returned 0x3 [0074.535] IsAppThemed () returned 0x1 [0074.535] GetThemeAppProperties () returned 0x3 [0074.535] GetThemeAppProperties () returned 0x3 [0074.535] IsThemePartDefined () returned 0x1 [0074.535] GdipCreateRegion (region=0x14d880) returned 0x0 [0074.536] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0074.541] GdipCreateMatrix (matrix=0x14d880) returned 0x0 [0074.541] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0074.541] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14d8e8) returned 0x0 [0074.541] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.541] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0074.541] LocalFree (hMem=0xa931f0) returned 0x0 [0074.541] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.541] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0074.541] LocalFree (hMem=0xa931f0) returned 0x0 [0074.541] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0074.541] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d950) returned 0x0 [0074.541] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d910) returned 0x0 [0074.541] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14d910) returned 0x0 [0074.541] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0074.541] GdipGetDC (graphics=0x1afd81d0, hdc=0x14d958) returned 0x0 [0074.541] GetCurrentObject (hdc=0x5c010722, type=0x1) returned 0x1b00017 [0074.541] GetCurrentObject (hdc=0x5c010722, type=0x2) returned 0x1900010 [0074.541] GetCurrentObject (hdc=0x5c010722, type=0x7) returned 0x29050250 [0074.541] GetCurrentObject (hdc=0x5c010722, type=0x6) returned 0x18a002e [0074.541] SaveDC (hdc=0x5c010722) returned 1 [0074.542] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1604086f [0074.542] GetClipRgn (hdc=0x5c010722, hrgn=0x1604086f) returned 0 [0074.542] SelectClipRgn (hdc=0x5c010722, hrgn=0x51040864) returned 2 [0074.542] DeleteObject (ho=0x1604086f) returned 1 [0074.542] DeleteObject (ho=0x51040864) returned 1 [0074.542] OffsetViewportOrgEx (in: hdc=0x5c010722, x=0, y=0, lppt=0x217ddf8 | out: lppt=0x217ddf8) returned 1 [0074.542] DrawThemeParentBackground () returned 0x0 [0074.542] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14d508 | out: lpwndpl=0x14d508) returned 1 [0074.542] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d420 | out: lpRect=0x14d420) returned 1 [0074.542] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0074.542] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0074.542] GetSystemMetrics (nIndex=42) returned 0 [0074.542] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d180, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0074.542] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d180) returned 0xc [0074.542] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d208 | out: lpRect=0x14d208) returned 1 [0074.542] GetCurrentObject (hdc=0x5c010722, type=0x1) returned 0x1b00017 [0074.542] GetCurrentObject (hdc=0x5c010722, type=0x2) returned 0x1900010 [0074.542] GetCurrentObject (hdc=0x5c010722, type=0x7) returned 0x29050250 [0074.542] GetCurrentObject (hdc=0x5c010722, type=0x6) returned 0x18a002e [0074.542] SaveDC (hdc=0x5c010722) returned 2 [0074.542] GetNearestColor (hdc=0x5c010722, color=0xa0) returned 0xa0 [0074.543] CreateSolidBrush (color=0xa0) returned 0x45100860 [0074.543] FillRect (hDC=0x5c010722, lprc=0x14cef8, hbr=0x45100860) returned 1 [0074.543] DeleteObject (ho=0x45100860) returned 1 [0074.543] RestoreDC (hdc=0x5c010722, nSavedDC=-1) returned 1 [0074.543] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0074.543] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0074.543] GetSystemMetrics (nIndex=42) returned 0 [0074.543] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d0b0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0074.543] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d0b0) returned 0xc [0074.543] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d138 | out: lpRect=0x14d138) returned 1 [0074.543] GetCurrentObject (hdc=0x5c010722, type=0x1) returned 0x1b00017 [0074.543] GetCurrentObject (hdc=0x5c010722, type=0x2) returned 0x1900010 [0074.543] GetCurrentObject (hdc=0x5c010722, type=0x7) returned 0x29050250 [0074.543] GetCurrentObject (hdc=0x5c010722, type=0x6) returned 0x18a002e [0074.543] SaveDC (hdc=0x5c010722) returned 2 [0074.543] GetNearestColor (hdc=0x5c010722, color=0xa0) returned 0xa0 [0074.543] CreateSolidBrush (color=0xa0) returned 0x46100860 [0074.543] FillRect (hDC=0x5c010722, lprc=0x14ce28, hbr=0x46100860) returned 1 [0074.543] DeleteObject (ho=0x46100860) returned 1 [0074.543] RestoreDC (hdc=0x5c010722, nSavedDC=-1) returned 1 [0074.544] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0074.544] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0074.544] GetSystemMetrics (nIndex=42) returned 0 [0074.544] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d0b0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0074.544] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d0b0) returned 0xc [0074.544] RestoreDC (hdc=0x5c010722, nSavedDC=-1) returned 1 [0074.544] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x5c010722) returned 0x0 [0074.544] IsAppThemed () returned 0x1 [0074.544] GetThemeAppProperties () returned 0x3 [0074.544] GetThemeAppProperties () returned 0x3 [0074.544] IsAppThemed () returned 0x1 [0074.544] GetThemeAppProperties () returned 0x3 [0074.544] GetThemeAppProperties () returned 0x3 [0074.544] IsThemePartDefined () returned 0x1 [0074.544] GdipCreateRegion (region=0x14d820) returned 0x0 [0074.544] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0074.544] GdipCreateMatrix (matrix=0x14d820) returned 0x0 [0074.544] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0074.544] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14d888) returned 0x0 [0074.544] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.544] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0074.544] LocalFree (hMem=0xa931f0) returned 0x0 [0074.544] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.544] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0074.545] LocalFree (hMem=0xa931f0) returned 0x0 [0074.545] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0074.545] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d8f0) returned 0x0 [0074.545] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d8b0) returned 0x0 [0074.545] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14d8b0) returned 0x0 [0074.545] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0074.545] GdipGetDC (graphics=0x1afd81d0, hdc=0x14d8f8) returned 0x0 [0074.545] GetCurrentObject (hdc=0x5c010722, type=0x1) returned 0x1b00017 [0074.545] GetCurrentObject (hdc=0x5c010722, type=0x2) returned 0x1900010 [0074.545] GetCurrentObject (hdc=0x5c010722, type=0x7) returned 0x29050250 [0074.545] GetCurrentObject (hdc=0x5c010722, type=0x6) returned 0x18a002e [0074.545] SaveDC (hdc=0x5c010722) returned 1 [0074.545] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x52040864 [0074.545] GetClipRgn (hdc=0x5c010722, hrgn=0x52040864) returned 0 [0074.545] SelectClipRgn (hdc=0x5c010722, hrgn=0x1804086f) returned 2 [0074.545] DeleteObject (ho=0x52040864) returned 1 [0074.545] DeleteObject (ho=0x1804086f) returned 1 [0074.545] OffsetViewportOrgEx (in: hdc=0x5c010722, x=0, y=0, lppt=0x217ec00 | out: lppt=0x217ec00) returned 1 [0074.545] IsAppThemed () returned 0x1 [0074.545] GetThemeAppProperties () returned 0x3 [0074.545] GetThemeAppProperties () returned 0x3 [0074.545] DrawThemeBackground () returned 0x0 [0074.546] RestoreDC (hdc=0x5c010722, nSavedDC=-1) returned 1 [0074.546] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x5c010722) returned 0x0 [0074.546] GdipCreateRegion (region=0x14d810) returned 0x0 [0074.546] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0074.546] GdipCreateMatrix (matrix=0x14d810) returned 0x0 [0074.546] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0074.546] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14d878) returned 0x0 [0074.546] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.546] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0074.546] LocalFree (hMem=0xa931f0) returned 0x0 [0074.546] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.546] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0074.546] LocalFree (hMem=0xa931f0) returned 0x0 [0074.546] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0074.546] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d8e0) returned 0x0 [0074.546] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d8a0) returned 0x0 [0074.546] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14d8a0) returned 0x0 [0074.546] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0074.546] GdipGetDC (graphics=0x1afd81d0, hdc=0x14d8e8) returned 0x0 [0074.546] GetCurrentObject (hdc=0x5c010722, type=0x1) returned 0x1b00017 [0074.546] GetCurrentObject (hdc=0x5c010722, type=0x2) returned 0x1900010 [0074.546] GetCurrentObject (hdc=0x5c010722, type=0x7) returned 0x29050250 [0074.546] GetCurrentObject (hdc=0x5c010722, type=0x6) returned 0x18a002e [0074.547] SaveDC (hdc=0x5c010722) returned 1 [0074.547] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1904086f [0074.547] GetClipRgn (hdc=0x5c010722, hrgn=0x1904086f) returned 0 [0074.547] SelectClipRgn (hdc=0x5c010722, hrgn=0x53040864) returned 2 [0074.547] DeleteObject (ho=0x1904086f) returned 1 [0074.547] DeleteObject (ho=0x53040864) returned 1 [0074.547] OffsetViewportOrgEx (in: hdc=0x5c010722, x=0, y=0, lppt=0x217f0d8 | out: lppt=0x217f0d8) returned 1 [0074.547] IsAppThemed () returned 0x1 [0074.547] GetThemeAppProperties () returned 0x3 [0074.547] GetThemeAppProperties () returned 0x3 [0074.547] GetThemeBackgroundContentRect () returned 0x0 [0074.547] RestoreDC (hdc=0x5c010722, nSavedDC=-1) returned 1 [0074.547] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x5c010722) returned 0x0 [0074.547] IsAppThemed () returned 0x1 [0074.547] GetThemeAppProperties () returned 0x3 [0074.547] GetThemeAppProperties () returned 0x3 [0074.547] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14dac8) returned 0x0 [0074.547] GdipGetDC (graphics=0x1afd81d0, hdc=0x14daa8) returned 0x0 [0074.547] GetCurrentObject (hdc=0x5c010722, type=0x1) returned 0x1b00017 [0074.547] GetCurrentObject (hdc=0x5c010722, type=0x2) returned 0x1900010 [0074.547] GetCurrentObject (hdc=0x5c010722, type=0x7) returned 0x29050250 [0074.547] GetCurrentObject (hdc=0x5c010722, type=0x6) returned 0x18a002e [0074.547] SaveDC (hdc=0x5c010722) returned 1 [0074.548] GetTextAlign (hdc=0x5c010722) returned 0x0 [0074.548] GetTextColor (hdc=0x5c010722) returned 0x0 [0074.548] GetCurrentObject (hdc=0x5c010722, type=0x6) returned 0x18a002e [0074.548] GetObjectW (in: h=0x18a002e, c=92, pv=0x14d5e0 | out: pv=0x14d5e0) returned 92 [0074.548] SelectObject (hdc=0x5c010722, h=0x120a086d) returned 0x18a002e [0074.548] GetBkMode (hdc=0x5c010722) returned 2 [0074.548] SetBkMode (hdc=0x5c010722, mode=1) returned 2 [0074.548] DrawTextExW (in: hdc=0x5c010722, lpchText="Check", cchText=5, lprc=0x14d820, format=0x2415, lpdtp=0x217f6b8 | out: lpchText="Check", lprc=0x14d820) returned 13 [0074.548] DrawTextExW (in: hdc=0x5c010722, lpchText="Check", cchText=5, lprc=0x14da38, format=0x2015, lpdtp=0x217f6b8 | out: lpchText="Check", lprc=0x14da38) returned 13 [0074.548] RestoreDC (hdc=0x5c010722, nSavedDC=-1) returned 1 [0074.548] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x5c010722) returned 0x0 [0074.548] GetFocus () returned 0x1020c [0074.548] IsAppThemed () returned 0x1 [0074.548] GetThemeAppProperties () returned 0x3 [0074.548] GetThemeAppProperties () returned 0x3 [0074.548] GdipGetDC (graphics=0x1afd81d0, hdc=0x14ddb8) returned 0x0 [0074.548] BitBlt (hdc=0x5010830, x=0, y=0, cx=408, cy=23, hdcSrc=0x5c010722, x1=0, y1=0, rop=0xcc0020) returned 1 [0074.549] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x5c010722) returned 0x0 [0074.549] SelectPalette (hdc=0x5010830, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0074.549] SelectObject (hdc=0x5c010722, h=0x185000f) returned 0x29050250 [0074.549] DeleteDC (hdc=0x5c010722) returned 1 [0074.549] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0074.549] EndPaint (hWnd=0x1020c, lpPaint=0x14dd98) returned 1 [0074.549] MapWindowPoints (in: hWndFrom=0x1020c, hWndTo=0x0, lpPoints=0x217f820, cPoints=0x1 | out: lpPoints=0x217f820) returned 41353803 [0074.549] WindowFromPoint (Point=0x2850000032c) returned 0x1020c [0074.549] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x285032c) returned 0x1 [0074.549] NotifyWinEvent (event=0x800a, hwnd=0x1020c, idObject=-4, idChild=0) [0074.549] NotifyWinEvent (event=0x800c, hwnd=0x1020c, idObject=-4, idChild=0) [0074.549] SetWindowPos (hWnd=0x10214, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0074.549] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x46, wParam=0x0, lParam=0x14e450) returned 0x0 [0074.549] GetCapture () returned 0x1020c [0074.549] ReleaseCapture () returned 1 [0074.549] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0074.549] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.549] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x285032c) returned 0x1 [0074.550] IsWindowUnicode (hWnd=0x1020c) returned 1 [0074.550] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.550] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x285032c) returned 0x1 [0074.550] SetCursor (hCursor=0x10003) returned 0x10003 [0074.550] TranslateMessage (lpMsg=0x14edb0) returned 0 [0074.550] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0074.550] GetKeyState (nVirtKey=1) returned 1 [0074.550] GetKeyState (nVirtKey=2) returned 0 [0074.550] GetKeyState (nVirtKey=4) returned 0 [0074.550] GetKeyState (nVirtKey=5) returned 0 [0074.550] GetKeyState (nVirtKey=6) returned 0 [0074.550] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.550] IsWindowUnicode (hWnd=0x401fa) returned 1 [0074.550] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.550] TranslateMessage (lpMsg=0x14edb0) returned 0 [0074.550] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0074.550] BeginPaint (in: hWnd=0x401fa, lpPaint=0x14e4e8 | out: lpPaint=0x14e4e8) returned 0x5010825 [0074.550] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14e008 | out: lpwndpl=0x14e008) returned 1 [0074.550] GetClientRect (in: hWnd=0x401fa, lpRect=0x14df20 | out: lpRect=0x14df20) returned 1 [0074.550] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0074.550] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0074.550] GetSystemMetrics (nIndex=42) returned 0 [0074.550] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14dc80, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0074.550] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14dc80) returned 0xc [0074.550] GetClientRect (in: hWnd=0x401fa, lpRect=0x14dd08 | out: lpRect=0x14dd08) returned 1 [0074.550] GetCurrentObject (hdc=0x5010825, type=0x1) returned 0x1b00017 [0074.551] GetCurrentObject (hdc=0x5010825, type=0x2) returned 0x1900010 [0074.551] GetCurrentObject (hdc=0x5010825, type=0x7) returned 0x1050032 [0074.551] GetCurrentObject (hdc=0x5010825, type=0x6) returned 0x18a002e [0074.551] SaveDC (hdc=0x5010825) returned 1 [0074.551] GetNearestColor (hdc=0x5010825, color=0xa0) returned 0xa0 [0074.551] CreateSolidBrush (color=0xa0) returned 0x47100860 [0074.551] FillRect (hDC=0x5010825, lprc=0x14d9f8, hbr=0x47100860) returned 1 [0074.551] DeleteObject (ho=0x47100860) returned 1 [0074.551] RestoreDC (hdc=0x5010825, nSavedDC=-1) returned 1 [0074.552] SelectPalette (hdc=0x5010825, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0074.552] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0074.552] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0074.552] GetSystemMetrics (nIndex=42) returned 0 [0074.552] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14e380, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0074.552] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14e380) returned 0xc [0074.552] SelectPalette (hdc=0x5010825, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0074.552] EndPaint (hWnd=0x401fa, lpPaint=0x14e488) returned 1 [0074.552] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.552] IsWindowUnicode (hWnd=0x301fc) returned 1 [0074.552] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.552] TranslateMessage (lpMsg=0x14edb0) returned 0 [0074.552] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0074.552] BeginPaint (in: hWnd=0x301fc, lpPaint=0x14e478 | out: lpPaint=0x14e478) returned 0x5010830 [0074.552] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301fc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.553] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301fc, Msg=0x14, wParam=0x5010830, lParam=0x0) returned 0x1 [0074.553] GetStockObject (i=5) returned 0x1900015 [0074.553] SelectPalette (hdc=0x5010830, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0074.553] CreateCompatibleDC (hdc=0x5010830) returned 0x61010722 [0074.553] SelectObject (hdc=0x61010722, h=0x29050250) returned 0x185000f [0074.553] GdipCreateFromHDC (hdc=0x61010722, graphics=0x14e3f8) returned 0x0 [0074.553] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0074.553] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=123, height=23, combineMode=0x0) returned 0x0 [0074.553] GdipCreateMatrix (matrix=0x14e420) returned 0x0 [0074.553] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0074.553] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14e488) returned 0x0 [0074.553] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.553] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0074.553] LocalFree (hMem=0xa931f0) returned 0x0 [0074.553] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0074.553] GdipCreateRegion (region=0x14e420) returned 0x0 [0074.554] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0074.554] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e480) returned 0x0 [0074.554] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e520) returned 0x0 [0074.554] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd960dbd) returned 0x0 [0074.554] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0074.554] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e198) returned 0x0 [0074.554] GetCurrentObject (hdc=0x61010722, type=0x1) returned 0x1b00017 [0074.554] GetCurrentObject (hdc=0x61010722, type=0x2) returned 0x1900010 [0074.554] GetCurrentObject (hdc=0x61010722, type=0x7) returned 0x29050250 [0074.554] GetCurrentObject (hdc=0x61010722, type=0x6) returned 0x18a002e [0074.554] SaveDC (hdc=0x61010722) returned 1 [0074.554] GetNearestColor (hdc=0x61010722, color=0xa0) returned 0xa0 [0074.554] GetNearestColor (hdc=0x61010722, color=0x35) returned 0x35 [0074.554] GetNearestColor (hdc=0x61010722, color=0x0) returned 0x0 [0074.554] GetNearestColor (hdc=0x61010722, color=0x4848e5) returned 0x4848e5 [0074.554] GetNearestColor (hdc=0x61010722, color=0x0) returned 0x0 [0074.554] GetNearestColor (hdc=0x61010722, color=0x5151ff) returned 0x5151ff [0074.554] GetNearestColor (hdc=0x61010722, color=0x4848e5) returned 0x4848e5 [0074.555] GetNearestColor (hdc=0x61010722, color=0xc0) returned 0xc0 [0074.555] GetNearestColor (hdc=0x61010722, color=0x0) returned 0x0 [0074.555] RestoreDC (hdc=0x61010722, nSavedDC=-1) returned 1 [0074.555] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x61010722) returned 0x0 [0074.555] IsAppThemed () returned 0x1 [0074.555] GetThemeAppProperties () returned 0x3 [0074.555] GetThemeAppProperties () returned 0x3 [0074.555] IsAppThemed () returned 0x1 [0074.555] GetThemeAppProperties () returned 0x3 [0074.555] GetThemeAppProperties () returned 0x3 [0074.555] DrawTextExW (in: hdc=0x8010893, lpchText="Enter Code", cchText=10, lprc=0x14de08, format=0x2415, lpdtp=0x2180850 | out: lpchText="Enter Code", lprc=0x14de08) returned 13 [0074.555] IsAppThemed () returned 0x1 [0074.555] GetThemeAppProperties () returned 0x3 [0074.555] GetThemeAppProperties () returned 0x3 [0074.555] IsAppThemed () returned 0x1 [0074.555] GetThemeAppProperties () returned 0x3 [0074.555] GetThemeAppProperties () returned 0x3 [0074.555] GetFocus () returned 0x1020c [0074.555] IsAppThemed () returned 0x1 [0074.555] GetThemeAppProperties () returned 0x3 [0074.555] GetThemeAppProperties () returned 0x3 [0074.555] IsAppThemed () returned 0x1 [0074.555] GetThemeAppProperties () returned 0x3 [0074.555] GetThemeAppProperties () returned 0x3 [0074.555] IsThemePartDefined () returned 0x1 [0074.555] IsAppThemed () returned 0x1 [0074.555] GetThemeAppProperties () returned 0x3 [0074.555] GetThemeAppProperties () returned 0x3 [0074.555] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0074.555] IsAppThemed () returned 0x1 [0074.556] GetThemeAppProperties () returned 0x3 [0074.556] GetThemeAppProperties () returned 0x3 [0074.556] IsAppThemed () returned 0x1 [0074.556] GetThemeAppProperties () returned 0x3 [0074.556] GetThemeAppProperties () returned 0x3 [0074.556] IsThemePartDefined () returned 0x1 [0074.556] GdipCreateRegion (region=0x14df00) returned 0x0 [0074.556] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0074.556] GdipCreateMatrix (matrix=0x14df00) returned 0x0 [0074.556] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0074.556] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14df68) returned 0x0 [0074.556] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.556] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0074.556] LocalFree (hMem=0xa931f0) returned 0x0 [0074.556] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.556] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0074.556] LocalFree (hMem=0xa931f0) returned 0x0 [0074.556] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0074.556] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14dfd0) returned 0x0 [0074.556] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df90) returned 0x0 [0074.556] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df90) returned 0x0 [0074.556] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0074.556] GdipGetDC (graphics=0x1afd81d0, hdc=0x14dfd8) returned 0x0 [0074.556] GetCurrentObject (hdc=0x61010722, type=0x1) returned 0x1b00017 [0074.556] GetCurrentObject (hdc=0x61010722, type=0x2) returned 0x1900010 [0074.557] GetCurrentObject (hdc=0x61010722, type=0x7) returned 0x29050250 [0074.557] GetCurrentObject (hdc=0x61010722, type=0x6) returned 0x18a002e [0074.557] SaveDC (hdc=0x61010722) returned 1 [0074.557] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x54040864 [0074.557] GetClipRgn (hdc=0x61010722, hrgn=0x54040864) returned 0 [0074.557] SelectClipRgn (hdc=0x61010722, hrgn=0x1d04086f) returned 2 [0074.557] DeleteObject (ho=0x54040864) returned 1 [0074.557] DeleteObject (ho=0x1d04086f) returned 1 [0074.557] OffsetViewportOrgEx (in: hdc=0x61010722, x=0, y=0, lppt=0x2181238 | out: lppt=0x2181238) returned 1 [0074.557] DrawThemeParentBackground () returned 0x0 [0074.557] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14db88 | out: lpwndpl=0x14db88) returned 1 [0074.558] GetClientRect (in: hWnd=0x401fa, lpRect=0x14daa0 | out: lpRect=0x14daa0) returned 1 [0074.558] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0074.558] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0074.558] GetSystemMetrics (nIndex=42) returned 0 [0074.558] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d800, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0074.558] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d800) returned 0xc [0074.558] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d888 | out: lpRect=0x14d888) returned 1 [0074.558] GetCurrentObject (hdc=0x61010722, type=0x1) returned 0x1b00017 [0074.558] GetCurrentObject (hdc=0x61010722, type=0x2) returned 0x1900010 [0074.558] GetCurrentObject (hdc=0x61010722, type=0x7) returned 0x29050250 [0074.558] GetCurrentObject (hdc=0x61010722, type=0x6) returned 0x18a002e [0074.558] SaveDC (hdc=0x61010722) returned 2 [0074.558] GetNearestColor (hdc=0x61010722, color=0xa0) returned 0xa0 [0074.558] CreateSolidBrush (color=0xa0) returned 0x48100860 [0074.558] FillRect (hDC=0x61010722, lprc=0x14d578, hbr=0x48100860) returned 1 [0074.558] DeleteObject (ho=0x48100860) returned 1 [0074.558] RestoreDC (hdc=0x61010722, nSavedDC=-1) returned 1 [0074.558] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0074.558] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0074.558] GetSystemMetrics (nIndex=42) returned 0 [0074.558] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0074.558] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0074.559] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d7b8 | out: lpRect=0x14d7b8) returned 1 [0074.559] GetCurrentObject (hdc=0x61010722, type=0x1) returned 0x1b00017 [0074.559] GetCurrentObject (hdc=0x61010722, type=0x2) returned 0x1900010 [0074.559] GetCurrentObject (hdc=0x61010722, type=0x7) returned 0x29050250 [0074.559] GetCurrentObject (hdc=0x61010722, type=0x6) returned 0x18a002e [0074.559] SaveDC (hdc=0x61010722) returned 2 [0074.559] GetNearestColor (hdc=0x61010722, color=0xa0) returned 0xa0 [0074.559] CreateSolidBrush (color=0xa0) returned 0x49100860 [0074.559] FillRect (hDC=0x61010722, lprc=0x14d4a8, hbr=0x49100860) returned 1 [0074.559] DeleteObject (ho=0x49100860) returned 1 [0074.559] RestoreDC (hdc=0x61010722, nSavedDC=-1) returned 1 [0074.559] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0074.559] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0074.559] GetSystemMetrics (nIndex=42) returned 0 [0074.559] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0074.559] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0074.559] RestoreDC (hdc=0x61010722, nSavedDC=-1) returned 1 [0074.559] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x61010722) returned 0x0 [0074.559] IsAppThemed () returned 0x1 [0074.559] GetThemeAppProperties () returned 0x3 [0074.559] GetThemeAppProperties () returned 0x3 [0074.559] IsAppThemed () returned 0x1 [0074.559] GetThemeAppProperties () returned 0x3 [0074.559] GetThemeAppProperties () returned 0x3 [0074.559] IsThemePartDefined () returned 0x1 [0074.560] GdipCreateRegion (region=0x14dea0) returned 0x0 [0074.560] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0074.560] GdipCreateMatrix (matrix=0x14dea0) returned 0x0 [0074.560] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0074.560] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14df08) returned 0x0 [0074.560] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.560] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0074.560] LocalFree (hMem=0xa931f0) returned 0x0 [0074.560] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.560] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0074.560] LocalFree (hMem=0xa931f0) returned 0x0 [0074.560] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0074.560] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df70) returned 0x0 [0074.560] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df30) returned 0x0 [0074.560] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df30) returned 0x0 [0074.560] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0074.560] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df78) returned 0x0 [0074.560] GetCurrentObject (hdc=0x61010722, type=0x1) returned 0x1b00017 [0074.560] GetCurrentObject (hdc=0x61010722, type=0x2) returned 0x1900010 [0074.560] GetCurrentObject (hdc=0x61010722, type=0x7) returned 0x29050250 [0074.560] GetCurrentObject (hdc=0x61010722, type=0x6) returned 0x18a002e [0074.560] SaveDC (hdc=0x61010722) returned 1 [0074.560] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x1e04086f [0074.560] GetClipRgn (hdc=0x61010722, hrgn=0x1e04086f) returned 0 [0074.561] SelectClipRgn (hdc=0x61010722, hrgn=0x56040864) returned 2 [0074.561] DeleteObject (ho=0x1e04086f) returned 1 [0074.561] DeleteObject (ho=0x56040864) returned 1 [0074.561] OffsetViewportOrgEx (in: hdc=0x61010722, x=0, y=0, lppt=0x2182040 | out: lppt=0x2182040) returned 1 [0074.561] IsAppThemed () returned 0x1 [0074.561] GetThemeAppProperties () returned 0x3 [0074.561] GetThemeAppProperties () returned 0x3 [0074.561] DrawThemeBackground () returned 0x0 [0074.561] RestoreDC (hdc=0x61010722, nSavedDC=-1) returned 1 [0074.561] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x61010722) returned 0x0 [0074.561] GdipCreateRegion (region=0x14de90) returned 0x0 [0074.561] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0074.561] GdipCreateMatrix (matrix=0x14de90) returned 0x0 [0074.561] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0074.561] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14def8) returned 0x0 [0074.561] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.561] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0074.561] LocalFree (hMem=0xa931f0) returned 0x0 [0074.561] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.561] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0074.561] LocalFree (hMem=0xa931f0) returned 0x0 [0074.561] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0074.561] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df60) returned 0x0 [0074.562] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df20) returned 0x0 [0074.562] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df20) returned 0x0 [0074.562] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0074.562] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df68) returned 0x0 [0074.562] GetCurrentObject (hdc=0x61010722, type=0x1) returned 0x1b00017 [0074.562] GetCurrentObject (hdc=0x61010722, type=0x2) returned 0x1900010 [0074.562] GetCurrentObject (hdc=0x61010722, type=0x7) returned 0x29050250 [0074.562] GetCurrentObject (hdc=0x61010722, type=0x6) returned 0x18a002e [0074.562] SaveDC (hdc=0x61010722) returned 1 [0074.562] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x57040864 [0074.562] GetClipRgn (hdc=0x61010722, hrgn=0x57040864) returned 0 [0074.562] SelectClipRgn (hdc=0x61010722, hrgn=0x1f04086f) returned 2 [0074.562] DeleteObject (ho=0x57040864) returned 1 [0074.562] DeleteObject (ho=0x1f04086f) returned 1 [0074.562] OffsetViewportOrgEx (in: hdc=0x61010722, x=0, y=0, lppt=0x2182518 | out: lppt=0x2182518) returned 1 [0074.562] IsAppThemed () returned 0x1 [0074.562] GetThemeAppProperties () returned 0x3 [0074.562] GetThemeAppProperties () returned 0x3 [0074.562] GetThemeBackgroundContentRect () returned 0x0 [0074.562] RestoreDC (hdc=0x61010722, nSavedDC=-1) returned 1 [0074.562] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x61010722) returned 0x0 [0074.562] IsAppThemed () returned 0x1 [0074.563] GetThemeAppProperties () returned 0x3 [0074.563] GetThemeAppProperties () returned 0x3 [0074.563] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e148) returned 0x0 [0074.563] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e128) returned 0x0 [0074.563] GetCurrentObject (hdc=0x61010722, type=0x1) returned 0x1b00017 [0074.563] GetCurrentObject (hdc=0x61010722, type=0x2) returned 0x1900010 [0074.563] GetCurrentObject (hdc=0x61010722, type=0x7) returned 0x29050250 [0074.563] GetCurrentObject (hdc=0x61010722, type=0x6) returned 0x18a002e [0074.563] SaveDC (hdc=0x61010722) returned 1 [0074.563] GetTextAlign (hdc=0x61010722) returned 0x0 [0074.563] GetTextColor (hdc=0x61010722) returned 0x0 [0074.563] GetCurrentObject (hdc=0x61010722, type=0x6) returned 0x18a002e [0074.563] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dc60 | out: pv=0x14dc60) returned 92 [0074.563] SelectObject (hdc=0x61010722, h=0x120a086d) returned 0x18a002e [0074.563] GetBkMode (hdc=0x61010722) returned 2 [0074.563] SetBkMode (hdc=0x61010722, mode=1) returned 2 [0074.563] DrawTextExW (in: hdc=0x61010722, lpchText="Enter Code", cchText=10, lprc=0x14dea0, format=0x2415, lpdtp=0x2182af8 | out: lpchText="Enter Code", lprc=0x14dea0) returned 13 [0074.563] DrawTextExW (in: hdc=0x61010722, lpchText="Enter Code", cchText=10, lprc=0x14e0b8, format=0x2015, lpdtp=0x2182af8 | out: lpchText="Enter Code", lprc=0x14e0b8) returned 13 [0074.564] RestoreDC (hdc=0x61010722, nSavedDC=-1) returned 1 [0074.564] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x61010722) returned 0x0 [0074.564] GetFocus () returned 0x1020c [0074.564] IsAppThemed () returned 0x1 [0074.564] GetThemeAppProperties () returned 0x3 [0074.564] GetThemeAppProperties () returned 0x3 [0074.564] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e438) returned 0x0 [0074.564] BitBlt (hdc=0x5010830, x=0, y=0, cx=123, cy=23, hdcSrc=0x61010722, x1=0, y1=0, rop=0xcc0020) returned 1 [0074.564] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x61010722) returned 0x0 [0074.564] SelectPalette (hdc=0x5010830, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0074.564] SelectObject (hdc=0x61010722, h=0x185000f) returned 0x29050250 [0074.564] DeleteDC (hdc=0x61010722) returned 1 [0074.564] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0074.564] EndPaint (hWnd=0x301fc, lpPaint=0x14e418) returned 1 [0074.564] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.564] IsWindowUnicode (hWnd=0x201da) returned 1 [0074.564] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.564] TranslateMessage (lpMsg=0x14edb0) returned 0 [0074.564] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0074.564] BeginPaint (in: hWnd=0x201da, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0xb010256 [0074.565] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.565] SelectPalette (hdc=0xb010256, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0074.565] CreateCompatibleDC (hdc=0xb010256) returned 0x64010722 [0074.565] SelectObject (hdc=0x64010722, h=0x29050250) returned 0x185000f [0074.565] GdipCreateFromHDC (hdc=0x64010722, graphics=0x14e428) returned 0x0 [0074.565] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0074.565] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=40, height=20, combineMode=0x0) returned 0x0 [0074.565] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0074.565] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0074.565] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14e4b8) returned 0x0 [0074.565] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.565] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0074.565] LocalFree (hMem=0xa931f0) returned 0x0 [0074.565] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0074.565] GdipCreateRegion (region=0x14e450) returned 0x0 [0074.566] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0074.566] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0074.566] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0074.566] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0074.566] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0074.566] GetSystemMetrics (nIndex=42) returned 0 [0074.566] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:55") returned 4 [0074.566] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0074.566] GetClientRect (in: hWnd=0x201da, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0074.566] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0074.566] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0074.566] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0074.566] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0074.566] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0074.566] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.566] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0074.566] LocalFree (hMem=0xa931f0) returned 0x0 [0074.566] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0074.566] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.566] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0074.566] LocalFree (hMem=0xa931f0) returned 0x0 [0074.566] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0074.566] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0074.567] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0074.567] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0074.567] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0074.567] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0074.567] GetCurrentObject (hdc=0x64010722, type=0x1) returned 0x1b00017 [0074.567] GetCurrentObject (hdc=0x64010722, type=0x2) returned 0x1900010 [0074.567] GetCurrentObject (hdc=0x64010722, type=0x7) returned 0x29050250 [0074.567] GetCurrentObject (hdc=0x64010722, type=0x6) returned 0x18a002e [0074.567] SaveDC (hdc=0x64010722) returned 1 [0074.567] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2004086f [0074.567] GetClipRgn (hdc=0x64010722, hrgn=0x2004086f) returned 0 [0074.567] SelectClipRgn (hdc=0x64010722, hrgn=0x5a040864) returned 2 [0074.567] DeleteObject (ho=0x2004086f) returned 1 [0074.567] DeleteObject (ho=0x5a040864) returned 1 [0074.567] OffsetViewportOrgEx (in: hdc=0x64010722, x=0, y=0, lppt=0x2183210 | out: lppt=0x2183210) returned 1 [0074.567] GetNearestColor (hdc=0x64010722, color=0xa0) returned 0xa0 [0074.567] CreateSolidBrush (color=0xa0) returned 0x4a100860 [0074.567] FillRect (hDC=0x64010722, lprc=0x14e1e8, hbr=0x4a100860) returned 1 [0074.567] DeleteObject (ho=0x4a100860) returned 1 [0074.568] RestoreDC (hdc=0x64010722, nSavedDC=-1) returned 1 [0074.568] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x64010722) returned 0x0 [0074.568] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd940dbd) returned 0x0 [0074.568] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0074.568] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0074.568] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0074.568] GetSystemMetrics (nIndex=42) returned 0 [0074.568] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:55") returned 4 [0074.568] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0074.568] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0074.568] GetCurrentObject (hdc=0x64010722, type=0x1) returned 0x1b00017 [0074.568] GetCurrentObject (hdc=0x64010722, type=0x2) returned 0x1900010 [0074.568] GetCurrentObject (hdc=0x64010722, type=0x7) returned 0x29050250 [0074.568] GetCurrentObject (hdc=0x64010722, type=0x6) returned 0x18a002e [0074.568] SaveDC (hdc=0x64010722) returned 1 [0074.568] GetNearestColor (hdc=0x64010722, color=0xffffff) returned 0xffffff [0074.568] RestoreDC (hdc=0x64010722, nSavedDC=-1) returned 1 [0074.568] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x64010722) returned 0x0 [0074.569] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0074.569] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0074.569] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0074.569] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0074.569] GetCurrentObject (hdc=0x64010722, type=0x1) returned 0x1b00017 [0074.569] GetCurrentObject (hdc=0x64010722, type=0x2) returned 0x1900010 [0074.569] GetCurrentObject (hdc=0x64010722, type=0x7) returned 0x29050250 [0074.569] GetCurrentObject (hdc=0x64010722, type=0x6) returned 0x18a002e [0074.569] SaveDC (hdc=0x64010722) returned 1 [0074.569] GetTextAlign (hdc=0x64010722) returned 0x0 [0074.569] GetTextColor (hdc=0x64010722) returned 0x0 [0074.569] SetTextColor (hdc=0x64010722, color=0xffffff) returned 0x0 [0074.569] GetCurrentObject (hdc=0x64010722, type=0x6) returned 0x18a002e [0074.569] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0074.569] SelectObject (hdc=0x64010722, h=0x200a0899) returned 0x18a002e [0074.569] GetBkMode (hdc=0x64010722) returned 2 [0074.569] SetBkMode (hdc=0x64010722, mode=1) returned 2 [0074.569] DrawTextExW (in: hdc=0x64010722, lpchText="4:55", cchText=4, lprc=0x14e1c8, format=0x0, lpdtp=0x2183aa0 | out: lpchText="4:55", lprc=0x14e1c8) returned 20 [0074.570] RestoreDC (hdc=0x64010722, nSavedDC=-1) returned 1 [0074.570] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x64010722) returned 0x0 [0074.570] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0074.570] BitBlt (hdc=0xb010256, x=0, y=0, cx=40, cy=20, hdcSrc=0x64010722, x1=0, y1=0, rop=0xcc0020) returned 1 [0074.570] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x64010722) returned 0x0 [0074.570] SelectPalette (hdc=0xb010256, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0074.570] SelectObject (hdc=0x64010722, h=0x185000f) returned 0x29050250 [0074.570] DeleteDC (hdc=0x64010722) returned 1 [0074.570] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0074.570] EndPaint (hWnd=0x201da, lpPaint=0x14e448) returned 1 [0074.570] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.570] IsWindowUnicode (hWnd=0x201dc) returned 1 [0074.570] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.570] TranslateMessage (lpMsg=0x14edb0) returned 0 [0074.570] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0074.570] BeginPaint (in: hWnd=0x201dc, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0x5010825 [0074.570] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201dc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.571] SelectPalette (hdc=0x5010825, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0074.571] CreateCompatibleDC (hdc=0x5010825) returned 0x67010722 [0074.571] SelectObject (hdc=0x67010722, h=0x29050250) returned 0x185000f [0074.571] GdipCreateFromHDC (hdc=0x67010722, graphics=0x14e428) returned 0x0 [0074.571] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0074.571] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=144, height=13, combineMode=0x0) returned 0x0 [0074.571] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0074.571] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0074.571] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14e4b8) returned 0x0 [0074.571] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.571] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0074.571] LocalFree (hMem=0xa931f0) returned 0x0 [0074.571] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0074.571] GdipCreateRegion (region=0x14e450) returned 0x0 [0074.571] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0074.571] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0074.571] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0074.572] GetWindowTextLengthW (hWnd=0x201dc) returned 29 [0074.572] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201dc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1d [0074.572] GetSystemMetrics (nIndex=42) returned 0 [0074.572] GetWindowTextW (in: hWnd=0x201dc, lpString=0x14e320, nMaxCount=30 | out: lpString="Your Files Will Be Deleted on") returned 29 [0074.572] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201dc, Msg=0xd, wParam=0x1e, lParam=0x14e320) returned 0x1d [0074.572] GetClientRect (in: hWnd=0x201dc, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0074.572] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0074.572] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0074.572] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0074.572] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0074.572] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0074.572] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.572] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0074.572] LocalFree (hMem=0xa931f0) returned 0x0 [0074.572] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0074.572] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.572] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0074.572] LocalFree (hMem=0xa931f0) returned 0x0 [0074.572] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0074.572] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0074.572] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0074.572] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0074.572] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0074.573] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0074.573] GetCurrentObject (hdc=0x67010722, type=0x1) returned 0x1b00017 [0074.573] GetCurrentObject (hdc=0x67010722, type=0x2) returned 0x1900010 [0074.573] GetCurrentObject (hdc=0x67010722, type=0x7) returned 0x29050250 [0074.573] GetCurrentObject (hdc=0x67010722, type=0x6) returned 0x18a002e [0074.573] SaveDC (hdc=0x67010722) returned 1 [0074.573] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5b040864 [0074.573] GetClipRgn (hdc=0x67010722, hrgn=0x5b040864) returned 0 [0074.573] SelectClipRgn (hdc=0x67010722, hrgn=0x2204086f) returned 2 [0074.573] DeleteObject (ho=0x5b040864) returned 1 [0074.573] DeleteObject (ho=0x2204086f) returned 1 [0074.573] OffsetViewportOrgEx (in: hdc=0x67010722, x=0, y=0, lppt=0x2184148 | out: lppt=0x2184148) returned 1 [0074.573] GetNearestColor (hdc=0x67010722, color=0xa0) returned 0xa0 [0074.573] CreateSolidBrush (color=0xa0) returned 0x4b100860 [0074.573] FillRect (hDC=0x67010722, lprc=0x14e1e8, hbr=0x4b100860) returned 1 [0074.573] DeleteObject (ho=0x4b100860) returned 1 [0074.573] RestoreDC (hdc=0x67010722, nSavedDC=-1) returned 1 [0074.573] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x67010722) returned 0x0 [0074.573] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd920dbd) returned 0x0 [0074.573] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0074.574] GetWindowTextLengthW (hWnd=0x201dc) returned 29 [0074.574] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201dc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1d [0074.574] GetSystemMetrics (nIndex=42) returned 0 [0074.574] GetWindowTextW (in: hWnd=0x201dc, lpString=0x14e320, nMaxCount=30 | out: lpString="Your Files Will Be Deleted on") returned 29 [0074.574] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201dc, Msg=0xd, wParam=0x1e, lParam=0x14e320) returned 0x1d [0074.574] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0074.574] GetCurrentObject (hdc=0x67010722, type=0x1) returned 0x1b00017 [0074.574] GetCurrentObject (hdc=0x67010722, type=0x2) returned 0x1900010 [0074.574] GetCurrentObject (hdc=0x67010722, type=0x7) returned 0x29050250 [0074.574] GetCurrentObject (hdc=0x67010722, type=0x6) returned 0x18a002e [0074.574] SaveDC (hdc=0x67010722) returned 1 [0074.574] GetNearestColor (hdc=0x67010722, color=0xffffff) returned 0xffffff [0074.574] RestoreDC (hdc=0x67010722, nSavedDC=-1) returned 1 [0074.574] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x67010722) returned 0x0 [0074.574] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0074.574] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0074.574] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0074.575] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0074.575] GetCurrentObject (hdc=0x67010722, type=0x1) returned 0x1b00017 [0074.575] GetCurrentObject (hdc=0x67010722, type=0x2) returned 0x1900010 [0074.575] GetCurrentObject (hdc=0x67010722, type=0x7) returned 0x29050250 [0074.575] GetCurrentObject (hdc=0x67010722, type=0x6) returned 0x18a002e [0074.575] SaveDC (hdc=0x67010722) returned 1 [0074.575] GetTextAlign (hdc=0x67010722) returned 0x0 [0074.575] GetTextColor (hdc=0x67010722) returned 0x0 [0074.575] SetTextColor (hdc=0x67010722, color=0xffffff) returned 0x0 [0074.575] GetCurrentObject (hdc=0x67010722, type=0x6) returned 0x18a002e [0074.575] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0074.575] SelectObject (hdc=0x67010722, h=0xffffffffc80a01db) returned 0x18a002e [0074.575] GetBkMode (hdc=0x67010722) returned 2 [0074.575] SetBkMode (hdc=0x67010722, mode=1) returned 2 [0074.576] DrawTextExW (in: hdc=0x67010722, lpchText="Your Files Will Be Deleted on", cchText=29, lprc=0x14e1c8, format=0x0, lpdtp=0x2184a68 | out: lpchText="Your Files Will Be Deleted on", lprc=0x14e1c8) returned 13 [0074.576] RestoreDC (hdc=0x67010722, nSavedDC=-1) returned 1 [0074.576] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x67010722) returned 0x0 [0074.576] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0074.576] BitBlt (hdc=0x5010825, x=0, y=0, cx=144, cy=13, hdcSrc=0x67010722, x1=0, y1=0, rop=0xcc0020) returned 1 [0074.576] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x67010722) returned 0x0 [0074.576] SelectPalette (hdc=0x5010825, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0074.576] SelectObject (hdc=0x67010722, h=0x185000f) returned 0x29050250 [0074.576] DeleteDC (hdc=0x67010722) returned 1 [0074.576] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0074.576] EndPaint (hWnd=0x201dc, lpPaint=0x14e448) returned 1 [0074.576] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.576] IsWindowUnicode (hWnd=0x10206) returned 1 [0074.576] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.576] TranslateMessage (lpMsg=0x14edb0) returned 0 [0074.576] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0074.576] BeginPaint (in: hWnd=0x10206, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0x5010830 [0074.577] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10206, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.577] SelectPalette (hdc=0x5010830, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0074.577] CreateCompatibleDC (hdc=0x5010830) returned 0x6a010722 [0074.577] SelectObject (hdc=0x6a010722, h=0x29050250) returned 0x185000f [0074.577] GdipCreateFromHDC (hdc=0x6a010722, graphics=0x14e428) returned 0x0 [0074.577] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0074.577] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=55, height=26, combineMode=0x0) returned 0x0 [0074.577] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0074.577] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0074.577] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14e4b8) returned 0x0 [0074.577] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.577] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0074.577] LocalFree (hMem=0xa931f0) returned 0x0 [0074.577] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0074.577] GdipCreateRegion (region=0x14e450) returned 0x0 [0074.577] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0074.578] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0074.578] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0074.578] GetWindowTextLengthW (hWnd=0x10206) returned 20 [0074.578] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10206, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x14 [0074.578] GetSystemMetrics (nIndex=42) returned 0 [0074.578] GetWindowTextW (in: hWnd=0x10206, lpString=0x14e330, nMaxCount=21 | out: lpString="208 Files\r\nEncrypted") returned 20 [0074.578] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10206, Msg=0xd, wParam=0x15, lParam=0x14e330) returned 0x14 [0074.578] GetClientRect (in: hWnd=0x10206, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0074.578] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0074.578] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0074.578] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0074.578] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0074.578] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0074.578] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.578] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0074.578] LocalFree (hMem=0xa931f0) returned 0x0 [0074.578] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0074.578] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.578] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0074.578] LocalFree (hMem=0xa931f0) returned 0x0 [0074.578] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0074.578] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0074.578] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0074.578] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0074.578] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0074.578] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0074.579] GetCurrentObject (hdc=0x6a010722, type=0x1) returned 0x1b00017 [0074.579] GetCurrentObject (hdc=0x6a010722, type=0x2) returned 0x1900010 [0074.579] GetCurrentObject (hdc=0x6a010722, type=0x7) returned 0x29050250 [0074.579] GetCurrentObject (hdc=0x6a010722, type=0x6) returned 0x18a002e [0074.579] SaveDC (hdc=0x6a010722) returned 1 [0074.579] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2304086f [0074.579] GetClipRgn (hdc=0x6a010722, hrgn=0x2304086f) returned 0 [0074.579] SelectClipRgn (hdc=0x6a010722, hrgn=0x5d040864) returned 2 [0074.579] DeleteObject (ho=0x2304086f) returned 1 [0074.579] DeleteObject (ho=0x5d040864) returned 1 [0074.579] OffsetViewportOrgEx (in: hdc=0x6a010722, x=0, y=0, lppt=0x21850e0 | out: lppt=0x21850e0) returned 1 [0074.579] GetNearestColor (hdc=0x6a010722, color=0xa0) returned 0xa0 [0074.579] CreateSolidBrush (color=0xa0) returned 0x4c100860 [0074.579] FillRect (hDC=0x6a010722, lprc=0x14e1e8, hbr=0x4c100860) returned 1 [0074.579] DeleteObject (ho=0x4c100860) returned 1 [0074.579] RestoreDC (hdc=0x6a010722, nSavedDC=-1) returned 1 [0074.579] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x6a010722) returned 0x0 [0074.579] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd900dbd) returned 0x0 [0074.579] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0074.579] GetWindowTextLengthW (hWnd=0x10206) returned 20 [0074.579] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10206, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x14 [0074.579] GetSystemMetrics (nIndex=42) returned 0 [0074.579] GetWindowTextW (in: hWnd=0x10206, lpString=0x14e330, nMaxCount=21 | out: lpString="208 Files\r\nEncrypted") returned 20 [0074.579] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10206, Msg=0xd, wParam=0x15, lParam=0x14e330) returned 0x14 [0074.580] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0074.580] GetCurrentObject (hdc=0x6a010722, type=0x1) returned 0x1b00017 [0074.580] GetCurrentObject (hdc=0x6a010722, type=0x2) returned 0x1900010 [0074.580] GetCurrentObject (hdc=0x6a010722, type=0x7) returned 0x29050250 [0074.580] GetCurrentObject (hdc=0x6a010722, type=0x6) returned 0x18a002e [0074.580] SaveDC (hdc=0x6a010722) returned 1 [0074.580] GetNearestColor (hdc=0x6a010722, color=0xffffff) returned 0xffffff [0074.580] RestoreDC (hdc=0x6a010722, nSavedDC=-1) returned 1 [0074.580] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x6a010722) returned 0x0 [0074.580] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0074.580] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0074.580] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0074.580] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0074.580] GetCurrentObject (hdc=0x6a010722, type=0x1) returned 0x1b00017 [0074.580] GetCurrentObject (hdc=0x6a010722, type=0x2) returned 0x1900010 [0074.580] GetCurrentObject (hdc=0x6a010722, type=0x7) returned 0x29050250 [0074.580] GetCurrentObject (hdc=0x6a010722, type=0x6) returned 0x18a002e [0074.581] SaveDC (hdc=0x6a010722) returned 1 [0074.581] GetTextAlign (hdc=0x6a010722) returned 0x0 [0074.581] GetTextColor (hdc=0x6a010722) returned 0x0 [0074.581] SetTextColor (hdc=0x6a010722, color=0xffffff) returned 0x0 [0074.581] GetCurrentObject (hdc=0x6a010722, type=0x6) returned 0x18a002e [0074.581] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0074.581] SelectObject (hdc=0x6a010722, h=0xb0a087e) returned 0x18a002e [0074.581] GetBkMode (hdc=0x6a010722) returned 2 [0074.581] SetBkMode (hdc=0x6a010722, mode=1) returned 2 [0074.581] DrawTextExW (in: hdc=0x6a010722, lpchText="208 Files\r\nEncrypted", cchText=20, lprc=0x14e1c8, format=0x0, lpdtp=0x21859d0 | out: lpchText="208 Files\r\nEncrypted", lprc=0x14e1c8) returned 26 [0074.581] RestoreDC (hdc=0x6a010722, nSavedDC=-1) returned 1 [0074.581] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x6a010722) returned 0x0 [0074.581] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0074.581] BitBlt (hdc=0x5010830, x=0, y=0, cx=55, cy=26, hdcSrc=0x6a010722, x1=0, y1=0, rop=0xcc0020) returned 1 [0074.581] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x6a010722) returned 0x0 [0074.581] SelectPalette (hdc=0x5010830, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0074.581] SelectObject (hdc=0x6a010722, h=0x185000f) returned 0x29050250 [0074.582] DeleteDC (hdc=0x6a010722) returned 1 [0074.582] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0074.582] EndPaint (hWnd=0x10206, lpPaint=0x14e448) returned 1 [0074.582] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.582] IsWindowUnicode (hWnd=0x10208) returned 1 [0074.582] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.582] TranslateMessage (lpMsg=0x14edb0) returned 0 [0074.582] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0074.582] BeginPaint (in: hWnd=0x10208, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0xb010256 [0074.582] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10208, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.582] SelectPalette (hdc=0xb010256, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0074.582] CreateCompatibleDC (hdc=0xb010256) returned 0x6d010722 [0074.583] SelectObject (hdc=0x6d010722, h=0x29050250) returned 0x185000f [0074.583] GdipCreateFromHDC (hdc=0x6d010722, graphics=0x14e428) returned 0x0 [0074.583] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0074.583] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=87, height=15, combineMode=0x0) returned 0x0 [0074.583] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0074.583] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0074.583] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14e4b8) returned 0x0 [0074.583] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.583] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0074.583] LocalFree (hMem=0xa931f0) returned 0x0 [0074.583] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0074.583] GdipCreateRegion (region=0x14e450) returned 0x0 [0074.584] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0074.584] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0074.584] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0074.584] GetWindowTextLengthW (hWnd=0x10208) returned 16 [0074.584] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10208, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10 [0074.584] GetSystemMetrics (nIndex=42) returned 0 [0074.584] GetWindowTextW (in: hWnd=0x10208, lpString=0x14e330, nMaxCount=17 | out: lpString="Bitcoin Address:") returned 16 [0074.584] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10208, Msg=0xd, wParam=0x11, lParam=0x14e330) returned 0x10 [0074.584] GetClientRect (in: hWnd=0x10208, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0074.584] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0074.584] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0074.584] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0074.584] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0074.584] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0074.584] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.584] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0074.584] LocalFree (hMem=0xa931f0) returned 0x0 [0074.584] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0074.584] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.584] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0074.584] LocalFree (hMem=0xa931f0) returned 0x0 [0074.584] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0074.584] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0074.585] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0074.585] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0074.585] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0074.585] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0074.585] GetCurrentObject (hdc=0x6d010722, type=0x1) returned 0x1b00017 [0074.585] GetCurrentObject (hdc=0x6d010722, type=0x2) returned 0x1900010 [0074.585] GetCurrentObject (hdc=0x6d010722, type=0x7) returned 0x29050250 [0074.585] GetCurrentObject (hdc=0x6d010722, type=0x6) returned 0x18a002e [0074.585] SaveDC (hdc=0x6d010722) returned 1 [0074.585] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5e040864 [0074.585] GetClipRgn (hdc=0x6d010722, hrgn=0x5e040864) returned 0 [0074.585] SelectClipRgn (hdc=0x6d010722, hrgn=0x2504086f) returned 2 [0074.585] DeleteObject (ho=0x5e040864) returned 1 [0074.585] DeleteObject (ho=0x2504086f) returned 1 [0074.585] OffsetViewportOrgEx (in: hdc=0x6d010722, x=0, y=0, lppt=0x2186030 | out: lppt=0x2186030) returned 1 [0074.585] GetNearestColor (hdc=0x6d010722, color=0xa0) returned 0xa0 [0074.585] CreateSolidBrush (color=0xa0) returned 0x4d100860 [0074.585] FillRect (hDC=0x6d010722, lprc=0x14e1e8, hbr=0x4d100860) returned 1 [0074.585] DeleteObject (ho=0x4d100860) returned 1 [0074.585] RestoreDC (hdc=0x6d010722, nSavedDC=-1) returned 1 [0074.586] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x6d010722) returned 0x0 [0074.586] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd8e0dbd) returned 0x0 [0074.586] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0074.586] GetWindowTextLengthW (hWnd=0x10208) returned 16 [0074.586] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10208, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10 [0074.586] GetSystemMetrics (nIndex=42) returned 0 [0074.586] GetWindowTextW (in: hWnd=0x10208, lpString=0x14e330, nMaxCount=17 | out: lpString="Bitcoin Address:") returned 16 [0074.586] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10208, Msg=0xd, wParam=0x11, lParam=0x14e330) returned 0x10 [0074.586] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0074.586] GetCurrentObject (hdc=0x6d010722, type=0x1) returned 0x1b00017 [0074.586] GetCurrentObject (hdc=0x6d010722, type=0x2) returned 0x1900010 [0074.586] GetCurrentObject (hdc=0x6d010722, type=0x7) returned 0x29050250 [0074.586] GetCurrentObject (hdc=0x6d010722, type=0x6) returned 0x18a002e [0074.586] SaveDC (hdc=0x6d010722) returned 1 [0074.586] GetNearestColor (hdc=0x6d010722, color=0xffffff) returned 0xffffff [0074.586] RestoreDC (hdc=0x6d010722, nSavedDC=-1) returned 1 [0074.586] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x6d010722) returned 0x0 [0074.587] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0074.587] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0074.587] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0074.587] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0074.587] GetCurrentObject (hdc=0x6d010722, type=0x1) returned 0x1b00017 [0074.587] GetCurrentObject (hdc=0x6d010722, type=0x2) returned 0x1900010 [0074.587] GetCurrentObject (hdc=0x6d010722, type=0x7) returned 0x29050250 [0074.587] GetCurrentObject (hdc=0x6d010722, type=0x6) returned 0x18a002e [0074.587] SaveDC (hdc=0x6d010722) returned 1 [0074.587] GetTextAlign (hdc=0x6d010722) returned 0x0 [0074.587] GetTextColor (hdc=0x6d010722) returned 0x0 [0074.587] SetTextColor (hdc=0x6d010722, color=0xffffff) returned 0x0 [0074.587] GetCurrentObject (hdc=0x6d010722, type=0x6) returned 0x18a002e [0074.587] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0074.587] SelectObject (hdc=0x6d010722, h=0x370a08a3) returned 0x18a002e [0074.587] GetBkMode (hdc=0x6d010722) returned 2 [0074.587] SetBkMode (hdc=0x6d010722, mode=1) returned 2 [0074.587] DrawTextExW (in: hdc=0x6d010722, lpchText="Bitcoin Address:", cchText=16, lprc=0x14e1c8, format=0x0, lpdtp=0x2186908 | out: lpchText="Bitcoin Address:", lprc=0x14e1c8) returned 15 [0074.588] RestoreDC (hdc=0x6d010722, nSavedDC=-1) returned 1 [0074.588] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x6d010722) returned 0x0 [0074.588] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0074.588] BitBlt (hdc=0xb010256, x=0, y=0, cx=87, cy=15, hdcSrc=0x6d010722, x1=0, y1=0, rop=0xcc0020) returned 1 [0074.588] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x6d010722) returned 0x0 [0074.588] SelectPalette (hdc=0xb010256, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0074.588] SelectObject (hdc=0x6d010722, h=0x185000f) returned 0x29050250 [0074.588] DeleteDC (hdc=0x6d010722) returned 1 [0074.588] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0074.588] EndPaint (hWnd=0x10208, lpPaint=0x14e448) returned 1 [0074.588] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.588] IsWindowUnicode (hWnd=0x1020a) returned 1 [0074.588] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.588] TranslateMessage (lpMsg=0x14edb0) returned 0 [0074.588] DispatchMessageW (lpMsg=0x14edb0) returned 0x1 [0074.588] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020a, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0074.588] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0074.588] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x138, wParam=0x5010830, lParam=0x1020a) returned 0x1100059 [0074.589] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14d598 | out: lpwndpl=0x14d598) returned 1 [0074.589] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d4b0 | out: lpRect=0x14d4b0) returned 1 [0074.589] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0074.589] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0074.589] GetSystemMetrics (nIndex=42) returned 0 [0074.589] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d210, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0074.589] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d210) returned 0xc [0074.589] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d298 | out: lpRect=0x14d298) returned 1 [0074.589] GetCurrentObject (hdc=0x4901024b, type=0x1) returned 0x1b00017 [0074.589] GetCurrentObject (hdc=0x4901024b, type=0x2) returned 0x1900010 [0074.589] GetCurrentObject (hdc=0x4901024b, type=0x7) returned 0x6205007f [0074.589] GetCurrentObject (hdc=0x4901024b, type=0x6) returned 0x18a002e [0074.589] SaveDC (hdc=0x4901024b) returned 1 [0074.589] GetNearestColor (hdc=0x4901024b, color=0xa0) returned 0xa0 [0074.590] CreateSolidBrush (color=0xa0) returned 0x4e100860 [0074.590] FillRect (hDC=0x4901024b, lprc=0x14cf88, hbr=0x4e100860) returned 1 [0074.590] DeleteObject (ho=0x4e100860) returned 1 [0074.590] RestoreDC (hdc=0x4901024b, nSavedDC=-1) returned 1 [0074.590] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0074.590] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0074.590] GetSystemMetrics (nIndex=42) returned 0 [0074.590] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d140, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0074.590] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d140) returned 0xc [0074.590] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d1c8 | out: lpRect=0x14d1c8) returned 1 [0074.590] GetCurrentObject (hdc=0x4901024b, type=0x1) returned 0x1b00017 [0074.590] GetCurrentObject (hdc=0x4901024b, type=0x2) returned 0x1900010 [0074.590] GetCurrentObject (hdc=0x4901024b, type=0x7) returned 0x6205007f [0074.590] GetCurrentObject (hdc=0x4901024b, type=0x6) returned 0x18a002e [0074.590] SaveDC (hdc=0x4901024b) returned 1 [0074.590] GetNearestColor (hdc=0x4901024b, color=0xa0) returned 0xa0 [0074.590] CreateSolidBrush (color=0xa0) returned 0x4f100860 [0074.590] FillRect (hDC=0x4901024b, lprc=0x14ceb8, hbr=0x4f100860) returned 1 [0074.590] DeleteObject (ho=0x4f100860) returned 1 [0074.591] RestoreDC (hdc=0x4901024b, nSavedDC=-1) returned 1 [0074.591] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0074.591] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0074.591] GetSystemMetrics (nIndex=42) returned 0 [0074.591] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d140, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0074.591] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d140) returned 0xc [0074.591] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020a, Msg=0x14, wParam=0x5010830, lParam=0x0) returned 0x1 [0074.591] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x138, wParam=0x280108a5, lParam=0x1020a) returned 0x1100059 [0074.592] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.592] IsWindowUnicode (hWnd=0x1020e) returned 1 [0074.592] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.592] TranslateMessage (lpMsg=0x14edb0) returned 0 [0074.592] DispatchMessageW (lpMsg=0x14edb0) returned 0x1 [0074.592] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020e, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0074.592] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0074.592] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x138, wParam=0x5010825, lParam=0x1020e) returned 0x1100059 [0074.592] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14d5d8 | out: lpwndpl=0x14d5d8) returned 1 [0074.592] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d4f0 | out: lpRect=0x14d4f0) returned 1 [0074.592] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0074.592] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0074.592] GetSystemMetrics (nIndex=42) returned 0 [0074.592] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d250, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0074.592] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d250) returned 0xc [0074.592] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d2d8 | out: lpRect=0x14d2d8) returned 1 [0074.593] GetCurrentObject (hdc=0x4a01024b, type=0x1) returned 0x1b00017 [0074.593] GetCurrentObject (hdc=0x4a01024b, type=0x2) returned 0x1900010 [0074.593] GetCurrentObject (hdc=0x4a01024b, type=0x7) returned 0x6205007f [0074.593] GetCurrentObject (hdc=0x4a01024b, type=0x6) returned 0x18a002e [0074.593] SaveDC (hdc=0x4a01024b) returned 1 [0074.593] GetNearestColor (hdc=0x4a01024b, color=0xa0) returned 0xa0 [0074.593] CreateSolidBrush (color=0xa0) returned 0x50100860 [0074.593] FillRect (hDC=0x4a01024b, lprc=0x14cfc8, hbr=0x50100860) returned 1 [0074.593] DeleteObject (ho=0x50100860) returned 1 [0074.593] RestoreDC (hdc=0x4a01024b, nSavedDC=-1) returned 1 [0074.593] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0074.593] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0074.593] GetSystemMetrics (nIndex=42) returned 0 [0074.593] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d180, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0074.593] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d180) returned 0xc [0074.593] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d208 | out: lpRect=0x14d208) returned 1 [0074.593] GetCurrentObject (hdc=0x4a01024b, type=0x1) returned 0x1b00017 [0074.593] GetCurrentObject (hdc=0x4a01024b, type=0x2) returned 0x1900010 [0074.593] GetCurrentObject (hdc=0x4a01024b, type=0x7) returned 0x6205007f [0074.594] GetCurrentObject (hdc=0x4a01024b, type=0x6) returned 0x18a002e [0074.594] SaveDC (hdc=0x4a01024b) returned 1 [0074.594] GetNearestColor (hdc=0x4a01024b, color=0xa0) returned 0xa0 [0074.594] CreateSolidBrush (color=0xa0) returned 0x51100860 [0074.594] FillRect (hDC=0x4a01024b, lprc=0x14cef8, hbr=0x51100860) returned 1 [0074.594] DeleteObject (ho=0x51100860) returned 1 [0074.594] RestoreDC (hdc=0x4a01024b, nSavedDC=-1) returned 1 [0074.594] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0074.594] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0074.594] GetSystemMetrics (nIndex=42) returned 0 [0074.594] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d180, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0074.594] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d180) returned 0xc [0074.595] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020e, Msg=0x14, wParam=0x5010825, lParam=0x0) returned 0x1 [0074.595] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x138, wParam=0x5010825, lParam=0x1020e) returned 0x1100059 [0074.595] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x138, wParam=0x5010825, lParam=0x1020e) returned 0x1100059 [0074.595] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x138, wParam=0x5010825, lParam=0x1020e) returned 0x1100059 [0074.596] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.596] IsWindowUnicode (hWnd=0x10210) returned 1 [0074.596] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.597] TranslateMessage (lpMsg=0x14edb0) returned 0 [0074.597] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0074.597] BeginPaint (in: hWnd=0x10210, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0x5010830 [0074.597] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10210, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0074.597] SelectPalette (hdc=0x5010830, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0074.597] CreateCompatibleDC (hdc=0x5010830) returned 0xffffffff86010722 [0074.597] SelectObject (hdc=0xffffffff86010722, h=0x29050250) returned 0x185000f [0074.597] GdipCreateFromHDC (hdc=0xffffffff86010722, graphics=0x14e428) returned 0x0 [0074.597] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0074.597] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=216, height=23, combineMode=0x0) returned 0x0 [0074.597] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0074.597] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0074.597] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14e4b8) returned 0x0 [0074.597] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.597] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0074.598] LocalFree (hMem=0xa931f0) returned 0x0 [0074.598] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0074.598] GdipCreateRegion (region=0x14e450) returned 0x0 [0074.598] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0074.598] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0074.598] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0074.598] GetWindowTextLengthW (hWnd=0x10210) returned 24 [0074.598] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10210, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0074.598] GetSystemMetrics (nIndex=42) returned 0 [0074.598] GetWindowTextW (in: hWnd=0x10210, lpString=0x14e320, nMaxCount=25 | out: lpString="Your Files are Encrypted") returned 24 [0074.598] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10210, Msg=0xd, wParam=0x19, lParam=0x14e320) returned 0x18 [0074.598] GetClientRect (in: hWnd=0x10210, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0074.598] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0074.598] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0074.598] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0074.599] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0074.599] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0074.599] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.599] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0074.599] LocalFree (hMem=0xa931f0) returned 0x0 [0074.599] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0074.599] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.599] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0074.599] LocalFree (hMem=0xa931f0) returned 0x0 [0074.599] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0074.599] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0074.599] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0074.599] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0074.599] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0074.599] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0074.599] GetCurrentObject (hdc=0xffffffff86010722, type=0x1) returned 0x1b00017 [0074.599] GetCurrentObject (hdc=0xffffffff86010722, type=0x2) returned 0x1900010 [0074.599] GetCurrentObject (hdc=0xffffffff86010722, type=0x7) returned 0x29050250 [0074.599] GetCurrentObject (hdc=0xffffffff86010722, type=0x6) returned 0x18a002e [0074.599] SaveDC (hdc=0xffffffff86010722) returned 1 [0074.599] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x43040872 [0074.600] GetClipRgn (hdc=0xffffffff86010722, hrgn=0x43040872) returned 0 [0074.600] SelectClipRgn (hdc=0xffffffff86010722, hrgn=0x2a04086f) returned 2 [0074.600] DeleteObject (ho=0x43040872) returned 1 [0074.600] DeleteObject (ho=0x2a04086f) returned 1 [0074.600] OffsetViewportOrgEx (in: hdc=0xffffffff86010722, x=0, y=0, lppt=0x21881a8 | out: lppt=0x21881a8) returned 1 [0074.600] GetNearestColor (hdc=0xffffffff86010722, color=0xa0) returned 0xa0 [0074.600] CreateSolidBrush (color=0xa0) returned 0x52100860 [0074.600] FillRect (hDC=0xffffffff86010722, lprc=0x14e1e8, hbr=0x52100860) returned 1 [0074.600] DeleteObject (ho=0x52100860) returned 1 [0074.600] RestoreDC (hdc=0xffffffff86010722, nSavedDC=-1) returned 1 [0074.600] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff86010722) returned 0x0 [0074.600] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd8c0dbd) returned 0x0 [0074.600] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0074.600] GetWindowTextLengthW (hWnd=0x10210) returned 24 [0074.600] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10210, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0074.600] GetSystemMetrics (nIndex=42) returned 0 [0074.600] GetWindowTextW (in: hWnd=0x10210, lpString=0x14e320, nMaxCount=25 | out: lpString="Your Files are Encrypted") returned 24 [0074.600] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10210, Msg=0xd, wParam=0x19, lParam=0x14e320) returned 0x18 [0074.600] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0074.600] GetCurrentObject (hdc=0xffffffff86010722, type=0x1) returned 0x1b00017 [0074.600] GetCurrentObject (hdc=0xffffffff86010722, type=0x2) returned 0x1900010 [0074.601] GetCurrentObject (hdc=0xffffffff86010722, type=0x7) returned 0x29050250 [0074.601] GetCurrentObject (hdc=0xffffffff86010722, type=0x6) returned 0x18a002e [0074.601] SaveDC (hdc=0xffffffff86010722) returned 1 [0074.601] GetNearestColor (hdc=0xffffffff86010722, color=0xffffff) returned 0xffffff [0074.601] RestoreDC (hdc=0xffffffff86010722, nSavedDC=-1) returned 1 [0074.601] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff86010722) returned 0x0 [0074.601] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0074.601] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0074.601] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0074.601] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0074.601] GetCurrentObject (hdc=0xffffffff86010722, type=0x1) returned 0x1b00017 [0074.601] GetCurrentObject (hdc=0xffffffff86010722, type=0x2) returned 0x1900010 [0074.601] GetCurrentObject (hdc=0xffffffff86010722, type=0x7) returned 0x29050250 [0074.601] GetCurrentObject (hdc=0xffffffff86010722, type=0x6) returned 0x18a002e [0074.601] SaveDC (hdc=0xffffffff86010722) returned 1 [0074.601] GetTextAlign (hdc=0xffffffff86010722) returned 0x0 [0074.602] GetTextColor (hdc=0xffffffff86010722) returned 0x0 [0074.602] SetTextColor (hdc=0xffffffff86010722, color=0xffffff) returned 0x0 [0074.602] GetCurrentObject (hdc=0xffffffff86010722, type=0x6) returned 0x18a002e [0074.602] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0074.602] SelectObject (hdc=0xffffffff86010722, h=0x160a0258) returned 0x18a002e [0074.602] GetBkMode (hdc=0xffffffff86010722) returned 2 [0074.602] SetBkMode (hdc=0xffffffff86010722, mode=1) returned 2 [0074.602] DrawTextExW (in: hdc=0xffffffff86010722, lpchText="Your Files are Encrypted", cchText=24, lprc=0x14e1c8, format=0x0, lpdtp=0x2188ab0 | out: lpchText="Your Files are Encrypted", lprc=0x14e1c8) returned 23 [0074.604] RestoreDC (hdc=0xffffffff86010722, nSavedDC=-1) returned 1 [0074.604] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff86010722) returned 0x0 [0074.604] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0074.604] BitBlt (hdc=0x5010830, x=0, y=0, cx=216, cy=23, hdcSrc=0xffffffff86010722, x1=0, y1=0, rop=0xcc0020) returned 1 [0074.604] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff86010722) returned 0x0 [0074.604] SelectPalette (hdc=0x5010830, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0074.604] SelectObject (hdc=0xffffffff86010722, h=0x185000f) returned 0x29050250 [0074.604] DeleteDC (hdc=0xffffffff86010722) returned 1 [0074.604] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0074.604] EndPaint (hWnd=0x10210, lpPaint=0x14e448) returned 1 [0074.605] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.605] IsWindowUnicode (hWnd=0x301ee) returned 1 [0074.605] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.605] TranslateMessage (lpMsg=0x14edb0) returned 0 [0074.605] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0074.606] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0074.606] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0074.606] CoTaskMemFree (pv=0xa692f0) [0074.606] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0074.606] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0074.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0074.606] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0074.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0074.606] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0074.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e500) returned 1 [0074.606] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0074.606] GetFileType (hFile=0x270) returned 0x1 [0074.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e470) returned 1 [0074.606] GetFileType (hFile=0x270) returned 0x1 [0074.607] ReadFile (in: hFile=0x270, lpBuffer=0x218a610, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x218a610*, lpNumberOfBytesRead=0x14e5d8*=0x1, lpOverlapped=0x0) returned 1 [0074.607] ReadFile (in: hFile=0x270, lpBuffer=0x218a610, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x218a610*, lpNumberOfBytesRead=0x14e5d8*=0x0, lpOverlapped=0x0) returned 1 [0074.607] CloseHandle (hObject=0x270) returned 1 [0074.608] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0074.608] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0074.608] CoTaskMemFree (pv=0xa692f0) [0074.608] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0074.608] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0074.608] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0074.608] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0074.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0074.608] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0074.609] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e4c0) returned 1 [0074.609] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0074.609] GetFileType (hFile=0x270) returned 0x1 [0074.610] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e430) returned 1 [0074.610] GetFileType (hFile=0x270) returned 0x1 [0074.610] WriteFile (in: hFile=0x270, lpBuffer=0x218d960*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x14e508, lpOverlapped=0x0 | out: lpBuffer=0x218d960*, lpNumberOfBytesWritten=0x14e508*=0x1, lpOverlapped=0x0) returned 1 [0074.611] CloseHandle (hObject=0x270) returned 1 [0074.611] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0074.611] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0074.611] GetSystemMetrics (nIndex=42) returned 0 [0074.611] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e600, nMaxCount=5 | out: lpString="4:55") returned 4 [0074.611] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e600) returned 0x4 [0074.611] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0074.611] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0074.611] GetSystemMetrics (nIndex=42) returned 0 [0074.611] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e5a0, nMaxCount=5 | out: lpString="4:55") returned 4 [0074.612] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e5a0) returned 0x4 [0074.612] SetWindowTextW (hWnd=0x201da, lpString="4:54") returned 1 [0074.612] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xc, wParam=0x0, lParam=0x218b684) returned 0x1 [0074.612] GetStockObject (i=5) returned 0x1900015 [0074.612] GetDlgItem (hDlg=0x401fa, nIDDlgItem=131546) returned 0x201da [0074.612] SendMessageW (hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0074.612] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0074.612] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0074.612] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0074.612] GetSystemMetrics (nIndex=42) returned 0 [0074.612] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e460, nMaxCount=5 | out: lpString="4:54") returned 4 [0074.612] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e460) returned 0x4 [0074.612] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0074.612] AdjustWindowRectEx (in: lpRect=0x14e478, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e478) returned 1 [0074.613] SelectObject (hdc=0x8010893, h=0x200a0899) returned 0x120a086d [0074.613] DrawTextExW (in: hdc=0x8010893, lpchText="4:54", cchText=4, lprc=0x14e3e8, format=0x2400, lpdtp=0x218ec18 | out: lpchText="4:54", lprc=0x14e3e8) returned 20 [0074.613] InvalidateRect (hWnd=0x201da, lpRect=0x0, bErase=1) returned 1 [0074.613] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0074.613] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0074.613] GetSystemMetrics (nIndex=42) returned 0 [0074.613] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14e3d0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0074.613] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14e3d0) returned 0xc [0074.613] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.613] IsWindowUnicode (hWnd=0x201da) returned 1 [0074.613] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.613] TranslateMessage (lpMsg=0x14edb0) returned 0 [0074.613] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0074.613] BeginPaint (in: hWnd=0x201da, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0xb010256 [0074.613] SelectPalette (hdc=0xb010256, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0074.613] CreateCompatibleDC (hdc=0xb010256) returned 0xffffffff88010722 [0074.613] SelectObject (hdc=0xffffffff88010722, h=0x29050250) returned 0x185000f [0074.614] GdipCreateFromHDC (hdc=0xffffffff88010722, graphics=0x14e428) returned 0x0 [0074.614] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0074.614] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=40, height=20, combineMode=0x0) returned 0x0 [0074.614] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0074.614] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0074.614] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14e4b8) returned 0x0 [0074.614] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.614] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0074.614] LocalFree (hMem=0xa931f0) returned 0x0 [0074.614] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0074.614] GdipCreateRegion (region=0x14e450) returned 0x0 [0074.614] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0074.614] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0074.614] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0074.614] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0074.614] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0074.614] GetSystemMetrics (nIndex=42) returned 0 [0074.614] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:54") returned 4 [0074.615] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0074.615] GetClientRect (in: hWnd=0x201da, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0074.615] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0074.615] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0074.615] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0074.615] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0074.615] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0074.615] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.615] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0074.615] LocalFree (hMem=0xa931f0) returned 0x0 [0074.615] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0074.615] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.615] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0074.615] LocalFree (hMem=0xa931f0) returned 0x0 [0074.615] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0074.615] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0074.615] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0074.615] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0074.615] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0074.615] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0074.615] GetCurrentObject (hdc=0xffffffff88010722, type=0x1) returned 0x1b00017 [0074.615] GetCurrentObject (hdc=0xffffffff88010722, type=0x2) returned 0x1900010 [0074.616] GetCurrentObject (hdc=0xffffffff88010722, type=0x7) returned 0x29050250 [0074.616] GetCurrentObject (hdc=0xffffffff88010722, type=0x6) returned 0x18a002e [0074.616] SaveDC (hdc=0xffffffff88010722) returned 1 [0074.616] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2b04086f [0074.616] GetClipRgn (hdc=0xffffffff88010722, hrgn=0x2b04086f) returned 0 [0074.616] SelectClipRgn (hdc=0xffffffff88010722, hrgn=0x46040872) returned 2 [0074.616] DeleteObject (ho=0x2b04086f) returned 1 [0074.616] DeleteObject (ho=0x46040872) returned 1 [0074.616] OffsetViewportOrgEx (in: hdc=0xffffffff88010722, x=0, y=0, lppt=0x218f318 | out: lppt=0x218f318) returned 1 [0074.616] GetNearestColor (hdc=0xffffffff88010722, color=0xa0) returned 0xa0 [0074.616] CreateSolidBrush (color=0xa0) returned 0x53100860 [0074.616] FillRect (hDC=0xffffffff88010722, lprc=0x14e1e8, hbr=0x53100860) returned 1 [0074.616] DeleteObject (ho=0x53100860) returned 1 [0074.616] RestoreDC (hdc=0xffffffff88010722, nSavedDC=-1) returned 1 [0074.616] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff88010722) returned 0x0 [0074.616] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd8a0dbd) returned 0x0 [0074.616] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0074.616] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0074.616] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0074.617] GetSystemMetrics (nIndex=42) returned 0 [0074.617] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:54") returned 4 [0074.617] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0074.617] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0074.617] GetCurrentObject (hdc=0xffffffff88010722, type=0x1) returned 0x1b00017 [0074.617] GetCurrentObject (hdc=0xffffffff88010722, type=0x2) returned 0x1900010 [0074.617] GetCurrentObject (hdc=0xffffffff88010722, type=0x7) returned 0x29050250 [0074.617] GetCurrentObject (hdc=0xffffffff88010722, type=0x6) returned 0x18a002e [0074.617] SaveDC (hdc=0xffffffff88010722) returned 1 [0074.617] GetNearestColor (hdc=0xffffffff88010722, color=0xffffff) returned 0xffffff [0074.617] RestoreDC (hdc=0xffffffff88010722, nSavedDC=-1) returned 1 [0074.617] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff88010722) returned 0x0 [0074.617] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0074.617] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0074.617] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0074.617] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0074.617] GetCurrentObject (hdc=0xffffffff88010722, type=0x1) returned 0x1b00017 [0074.617] GetCurrentObject (hdc=0xffffffff88010722, type=0x2) returned 0x1900010 [0074.618] GetCurrentObject (hdc=0xffffffff88010722, type=0x7) returned 0x29050250 [0074.618] GetCurrentObject (hdc=0xffffffff88010722, type=0x6) returned 0x18a002e [0074.618] SaveDC (hdc=0xffffffff88010722) returned 1 [0074.618] GetTextAlign (hdc=0xffffffff88010722) returned 0x0 [0074.618] GetTextColor (hdc=0xffffffff88010722) returned 0x0 [0074.618] SetTextColor (hdc=0xffffffff88010722, color=0xffffff) returned 0x0 [0074.618] GetCurrentObject (hdc=0xffffffff88010722, type=0x6) returned 0x18a002e [0074.618] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0074.618] SelectObject (hdc=0xffffffff88010722, h=0x200a0899) returned 0x18a002e [0074.618] GetBkMode (hdc=0xffffffff88010722) returned 2 [0074.618] SetBkMode (hdc=0xffffffff88010722, mode=1) returned 2 [0074.618] DrawTextExW (in: hdc=0xffffffff88010722, lpchText="4:54", cchText=4, lprc=0x14e1c8, format=0x0, lpdtp=0x218fba8 | out: lpchText="4:54", lprc=0x14e1c8) returned 20 [0074.618] RestoreDC (hdc=0xffffffff88010722, nSavedDC=-1) returned 1 [0074.618] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff88010722) returned 0x0 [0074.618] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0074.618] BitBlt (hdc=0xb010256, x=0, y=0, cx=40, cy=20, hdcSrc=0xffffffff88010722, x1=0, y1=0, rop=0xcc0020) returned 1 [0074.618] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff88010722) returned 0x0 [0074.619] SelectPalette (hdc=0xb010256, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0074.619] SelectObject (hdc=0xffffffff88010722, h=0x185000f) returned 0x29050250 [0074.619] DeleteDC (hdc=0xffffffff88010722) returned 1 [0074.619] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0074.619] EndPaint (hWnd=0x201da, lpPaint=0x14e448) returned 1 [0074.619] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0074.619] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0074.619] WaitMessage () returned 1 [0074.629] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.629] IsWindowUnicode (hWnd=0x201ec) returned 1 [0074.630] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.630] TranslateMessage (lpMsg=0x14edb0) returned 0 [0074.630] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0074.630] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0074.630] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0074.630] WaitMessage () returned 1 [0074.688] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.688] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x84, wParam=0x0, lParam=0x1fb029e) returned 0x1 [0074.688] IsWindowUnicode (hWnd=0x401fa) returned 1 [0074.688] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.688] TranslateMessage (lpMsg=0x14edb0) returned 0 [0074.688] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0074.689] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0074.689] InvalidateRect (hWnd=0x1020c, lpRect=0x0, bErase=0) returned 1 [0074.689] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.689] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x84, wParam=0x0, lParam=0x1fb029e) returned 0x1 [0074.689] IsWindowUnicode (hWnd=0x401fa) returned 1 [0074.689] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.689] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x84, wParam=0x0, lParam=0x1fb029e) returned 0x1 [0074.690] SetCursor (hCursor=0x10003) returned 0x10003 [0074.690] TranslateMessage (lpMsg=0x14edb0) returned 0 [0074.690] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0074.690] _TrackMouseEvent (in: lpEventTrack=0x218fcb8 | out: lpEventTrack=0x218fcb8) returned 1 [0074.690] SendMessageW (hWnd=0x401fa, Msg=0xc12f, wParam=0x0, lParam=0x0) returned 0x0 [0074.690] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xc12f, wParam=0x0, lParam=0x0) returned 0x0 [0074.690] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x200, wParam=0x0, lParam=0x12e00f7) returned 0x0 [0074.690] GetKeyState (nVirtKey=1) returned 1 [0074.690] GetKeyState (nVirtKey=2) returned 0 [0074.690] GetKeyState (nVirtKey=4) returned 0 [0074.690] GetKeyState (nVirtKey=5) returned 0 [0074.690] GetKeyState (nVirtKey=6) returned 0 [0074.690] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.690] IsWindowUnicode (hWnd=0x1020c) returned 1 [0074.690] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.690] TranslateMessage (lpMsg=0x14edb0) returned 0 [0074.690] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0074.690] BeginPaint (in: hWnd=0x1020c, lpPaint=0x14e478 | out: lpPaint=0x14e478) returned 0x5010830 [0074.690] SelectPalette (hdc=0x5010830, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0074.690] CreateCompatibleDC (hdc=0x5010830) returned 0xffffffff8a010722 [0074.690] SelectObject (hdc=0xffffffff8a010722, h=0x29050250) returned 0x185000f [0074.690] GdipCreateFromHDC (hdc=0xffffffff8a010722, graphics=0x14e3f8) returned 0x0 [0074.690] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0074.690] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=408, height=23, combineMode=0x0) returned 0x0 [0074.690] GdipCreateMatrix (matrix=0x14e420) returned 0x0 [0074.690] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0074.690] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14e488) returned 0x0 [0074.691] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.691] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0074.691] LocalFree (hMem=0xa931f0) returned 0x0 [0074.691] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0074.691] GdipCreateRegion (region=0x14e420) returned 0x0 [0074.691] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0074.691] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e480) returned 0x0 [0074.691] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e520) returned 0x0 [0074.691] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd880dbd) returned 0x0 [0074.691] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0074.691] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e198) returned 0x0 [0074.691] GetCurrentObject (hdc=0xffffffff8a010722, type=0x1) returned 0x1b00017 [0074.691] GetCurrentObject (hdc=0xffffffff8a010722, type=0x2) returned 0x1900010 [0074.691] GetCurrentObject (hdc=0xffffffff8a010722, type=0x7) returned 0x29050250 [0074.691] GetCurrentObject (hdc=0xffffffff8a010722, type=0x6) returned 0x18a002e [0074.691] SaveDC (hdc=0xffffffff8a010722) returned 1 [0074.691] GetNearestColor (hdc=0xffffffff8a010722, color=0xa0) returned 0xa0 [0074.691] GetNearestColor (hdc=0xffffffff8a010722, color=0x35) returned 0x35 [0074.691] GetNearestColor (hdc=0xffffffff8a010722, color=0x0) returned 0x0 [0074.691] GetNearestColor (hdc=0xffffffff8a010722, color=0x4848e5) returned 0x4848e5 [0074.691] GetNearestColor (hdc=0xffffffff8a010722, color=0x0) returned 0x0 [0074.691] GetNearestColor (hdc=0xffffffff8a010722, color=0x5151ff) returned 0x5151ff [0074.691] GetNearestColor (hdc=0xffffffff8a010722, color=0x4848e5) returned 0x4848e5 [0074.691] GetNearestColor (hdc=0xffffffff8a010722, color=0xc0) returned 0xc0 [0074.691] GetNearestColor (hdc=0xffffffff8a010722, color=0x0) returned 0x0 [0074.692] RestoreDC (hdc=0xffffffff8a010722, nSavedDC=-1) returned 1 [0074.694] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8a010722) returned 0x0 [0074.694] IsAppThemed () returned 0x1 [0074.695] GetThemeAppProperties () returned 0x3 [0074.695] GetThemeAppProperties () returned 0x3 [0074.695] IsAppThemed () returned 0x1 [0074.695] GetThemeAppProperties () returned 0x3 [0074.695] GetThemeAppProperties () returned 0x3 [0074.695] SelectObject (hdc=0x8010893, h=0x120a086d) returned 0x200a0899 [0074.695] DrawTextExW (in: hdc=0x8010893, lpchText="Check", cchText=5, lprc=0x14de08, format=0x2415, lpdtp=0x21907b8 | out: lpchText="Check", lprc=0x14de08) returned 13 [0074.695] IsAppThemed () returned 0x1 [0074.695] GetThemeAppProperties () returned 0x3 [0074.695] GetThemeAppProperties () returned 0x3 [0074.696] IsAppThemed () returned 0x1 [0074.696] GetThemeAppProperties () returned 0x3 [0074.696] GetThemeAppProperties () returned 0x3 [0074.696] GetFocus () returned 0x1020c [0074.696] IsAppThemed () returned 0x1 [0074.696] GetThemeAppProperties () returned 0x3 [0074.696] GetThemeAppProperties () returned 0x3 [0074.696] IsAppThemed () returned 0x1 [0074.696] GetThemeAppProperties () returned 0x3 [0074.696] GetThemeAppProperties () returned 0x3 [0074.696] IsThemePartDefined () returned 0x1 [0074.696] IsAppThemed () returned 0x1 [0074.696] GetThemeAppProperties () returned 0x3 [0074.696] GetThemeAppProperties () returned 0x3 [0074.696] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0074.696] IsAppThemed () returned 0x1 [0074.696] GetThemeAppProperties () returned 0x3 [0074.696] GetThemeAppProperties () returned 0x3 [0074.696] IsAppThemed () returned 0x1 [0074.696] GetThemeAppProperties () returned 0x3 [0074.696] GetThemeAppProperties () returned 0x3 [0074.696] IsThemePartDefined () returned 0x1 [0074.696] GdipCreateRegion (region=0x14df00) returned 0x0 [0074.696] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0074.696] GdipCreateMatrix (matrix=0x14df00) returned 0x0 [0074.696] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0074.696] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14df68) returned 0x0 [0074.696] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.696] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0074.696] LocalFree (hMem=0xa931f0) returned 0x0 [0074.696] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.696] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0074.696] LocalFree (hMem=0xa931f0) returned 0x0 [0074.696] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0074.696] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14dfd0) returned 0x0 [0074.697] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df90) returned 0x0 [0074.697] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df90) returned 0x0 [0074.697] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0074.697] GdipGetDC (graphics=0x1afd81d0, hdc=0x14dfd8) returned 0x0 [0074.697] GetCurrentObject (hdc=0xffffffff8a010722, type=0x1) returned 0x1b00017 [0074.697] GetCurrentObject (hdc=0xffffffff8a010722, type=0x2) returned 0x1900010 [0074.697] GetCurrentObject (hdc=0xffffffff8a010722, type=0x7) returned 0x29050250 [0074.697] GetCurrentObject (hdc=0xffffffff8a010722, type=0x6) returned 0x18a002e [0074.697] SaveDC (hdc=0xffffffff8a010722) returned 1 [0074.697] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x47040872 [0074.697] GetClipRgn (hdc=0xffffffff8a010722, hrgn=0x47040872) returned 0 [0074.697] SelectClipRgn (hdc=0xffffffff8a010722, hrgn=0x2e04086f) returned 2 [0074.697] DeleteObject (ho=0x47040872) returned 1 [0074.697] DeleteObject (ho=0x2e04086f) returned 1 [0074.697] OffsetViewportOrgEx (in: hdc=0xffffffff8a010722, x=0, y=0, lppt=0x21911a0 | out: lppt=0x21911a0) returned 1 [0074.697] DrawThemeParentBackground () returned 0x0 [0074.697] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14db88 | out: lpwndpl=0x14db88) returned 1 [0074.697] GetClientRect (in: hWnd=0x401fa, lpRect=0x14daa0 | out: lpRect=0x14daa0) returned 1 [0074.697] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0074.697] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0074.697] GetSystemMetrics (nIndex=42) returned 0 [0074.697] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d800, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0074.697] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d800) returned 0xc [0074.697] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d888 | out: lpRect=0x14d888) returned 1 [0074.697] GetCurrentObject (hdc=0xffffffff8a010722, type=0x1) returned 0x1b00017 [0074.698] GetCurrentObject (hdc=0xffffffff8a010722, type=0x2) returned 0x1900010 [0074.698] GetCurrentObject (hdc=0xffffffff8a010722, type=0x7) returned 0x29050250 [0074.698] GetCurrentObject (hdc=0xffffffff8a010722, type=0x6) returned 0x18a002e [0074.698] SaveDC (hdc=0xffffffff8a010722) returned 2 [0074.698] GetNearestColor (hdc=0xffffffff8a010722, color=0xa0) returned 0xa0 [0074.698] CreateSolidBrush (color=0xa0) returned 0x54100860 [0074.698] FillRect (hDC=0xffffffff8a010722, lprc=0x14d578, hbr=0x54100860) returned 1 [0074.698] DeleteObject (ho=0x54100860) returned 1 [0074.698] RestoreDC (hdc=0xffffffff8a010722, nSavedDC=-1) returned 1 [0074.698] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0074.698] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0074.698] GetSystemMetrics (nIndex=42) returned 0 [0074.698] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0074.698] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0074.698] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d7b8 | out: lpRect=0x14d7b8) returned 1 [0074.698] GetCurrentObject (hdc=0xffffffff8a010722, type=0x1) returned 0x1b00017 [0074.698] GetCurrentObject (hdc=0xffffffff8a010722, type=0x2) returned 0x1900010 [0074.698] GetCurrentObject (hdc=0xffffffff8a010722, type=0x7) returned 0x29050250 [0074.698] GetCurrentObject (hdc=0xffffffff8a010722, type=0x6) returned 0x18a002e [0074.698] SaveDC (hdc=0xffffffff8a010722) returned 2 [0074.698] GetNearestColor (hdc=0xffffffff8a010722, color=0xa0) returned 0xa0 [0074.698] CreateSolidBrush (color=0xa0) returned 0x55100860 [0074.699] FillRect (hDC=0xffffffff8a010722, lprc=0x14d4a8, hbr=0x55100860) returned 1 [0074.699] DeleteObject (ho=0x55100860) returned 1 [0074.699] RestoreDC (hdc=0xffffffff8a010722, nSavedDC=-1) returned 1 [0074.699] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0074.699] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0074.699] GetSystemMetrics (nIndex=42) returned 0 [0074.699] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0074.699] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0074.699] RestoreDC (hdc=0xffffffff8a010722, nSavedDC=-1) returned 1 [0074.699] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8a010722) returned 0x0 [0074.699] IsAppThemed () returned 0x1 [0074.699] GetThemeAppProperties () returned 0x3 [0074.699] GetThemeAppProperties () returned 0x3 [0074.699] IsAppThemed () returned 0x1 [0074.699] GetThemeAppProperties () returned 0x3 [0074.699] GetThemeAppProperties () returned 0x3 [0074.699] IsThemePartDefined () returned 0x1 [0074.699] GdipCreateRegion (region=0x14dea0) returned 0x0 [0074.699] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0074.699] GdipCreateMatrix (matrix=0x14dea0) returned 0x0 [0074.699] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0074.699] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14df08) returned 0x0 [0074.699] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.699] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0074.699] LocalFree (hMem=0xa931f0) returned 0x0 [0074.699] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.699] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0074.699] LocalFree (hMem=0xa931f0) returned 0x0 [0074.700] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0074.700] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df70) returned 0x0 [0074.700] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df30) returned 0x0 [0074.700] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df30) returned 0x0 [0074.700] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0074.700] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df78) returned 0x0 [0074.700] GetCurrentObject (hdc=0xffffffff8a010722, type=0x1) returned 0x1b00017 [0074.700] GetCurrentObject (hdc=0xffffffff8a010722, type=0x2) returned 0x1900010 [0074.700] GetCurrentObject (hdc=0xffffffff8a010722, type=0x7) returned 0x29050250 [0074.700] GetCurrentObject (hdc=0xffffffff8a010722, type=0x6) returned 0x18a002e [0074.700] SaveDC (hdc=0xffffffff8a010722) returned 1 [0074.700] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x2f04086f [0074.700] GetClipRgn (hdc=0xffffffff8a010722, hrgn=0x2f04086f) returned 0 [0074.700] SelectClipRgn (hdc=0xffffffff8a010722, hrgn=0x49040872) returned 2 [0074.700] DeleteObject (ho=0x2f04086f) returned 1 [0074.700] DeleteObject (ho=0x49040872) returned 1 [0074.700] OffsetViewportOrgEx (in: hdc=0xffffffff8a010722, x=0, y=0, lppt=0x2191fa8 | out: lppt=0x2191fa8) returned 1 [0074.700] IsAppThemed () returned 0x1 [0074.700] GetThemeAppProperties () returned 0x3 [0074.700] GetThemeAppProperties () returned 0x3 [0074.700] DrawThemeBackground () returned 0x0 [0074.700] RestoreDC (hdc=0xffffffff8a010722, nSavedDC=-1) returned 1 [0074.700] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8a010722) returned 0x0 [0074.700] GdipCreateRegion (region=0x14de90) returned 0x0 [0074.700] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0074.701] GdipCreateMatrix (matrix=0x14de90) returned 0x0 [0074.701] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0074.701] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14def8) returned 0x0 [0074.701] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.701] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0074.701] LocalFree (hMem=0xa931f0) returned 0x0 [0074.701] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0074.701] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0074.701] LocalFree (hMem=0xa931f0) returned 0x0 [0074.701] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0074.701] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df60) returned 0x0 [0074.701] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df20) returned 0x0 [0074.701] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df20) returned 0x0 [0074.701] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0074.701] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df68) returned 0x0 [0074.701] GetCurrentObject (hdc=0xffffffff8a010722, type=0x1) returned 0x1b00017 [0074.701] GetCurrentObject (hdc=0xffffffff8a010722, type=0x2) returned 0x1900010 [0074.701] GetCurrentObject (hdc=0xffffffff8a010722, type=0x7) returned 0x29050250 [0074.701] GetCurrentObject (hdc=0xffffffff8a010722, type=0x6) returned 0x18a002e [0074.701] SaveDC (hdc=0xffffffff8a010722) returned 1 [0074.701] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4a040872 [0074.701] GetClipRgn (hdc=0xffffffff8a010722, hrgn=0x4a040872) returned 0 [0074.701] SelectClipRgn (hdc=0xffffffff8a010722, hrgn=0x3004086f) returned 2 [0074.701] DeleteObject (ho=0x4a040872) returned 1 [0074.701] DeleteObject (ho=0x3004086f) returned 1 [0074.702] OffsetViewportOrgEx (in: hdc=0xffffffff8a010722, x=0, y=0, lppt=0x2192480 | out: lppt=0x2192480) returned 1 [0074.702] IsAppThemed () returned 0x1 [0074.702] GetThemeAppProperties () returned 0x3 [0074.702] GetThemeAppProperties () returned 0x3 [0074.702] GetThemeBackgroundContentRect () returned 0x0 [0074.702] RestoreDC (hdc=0xffffffff8a010722, nSavedDC=-1) returned 1 [0074.702] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8a010722) returned 0x0 [0074.702] IsAppThemed () returned 0x1 [0074.702] GetThemeAppProperties () returned 0x3 [0074.702] GetThemeAppProperties () returned 0x3 [0074.702] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e148) returned 0x0 [0074.702] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e128) returned 0x0 [0074.702] GetCurrentObject (hdc=0xffffffff8a010722, type=0x1) returned 0x1b00017 [0074.702] GetCurrentObject (hdc=0xffffffff8a010722, type=0x2) returned 0x1900010 [0074.702] GetCurrentObject (hdc=0xffffffff8a010722, type=0x7) returned 0x29050250 [0074.702] GetCurrentObject (hdc=0xffffffff8a010722, type=0x6) returned 0x18a002e [0074.702] SaveDC (hdc=0xffffffff8a010722) returned 1 [0074.702] GetTextAlign (hdc=0xffffffff8a010722) returned 0x0 [0074.702] GetTextColor (hdc=0xffffffff8a010722) returned 0x0 [0074.702] GetCurrentObject (hdc=0xffffffff8a010722, type=0x6) returned 0x18a002e [0074.702] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dc60 | out: pv=0x14dc60) returned 92 [0074.702] SelectObject (hdc=0xffffffff8a010722, h=0x120a086d) returned 0x18a002e [0074.702] GetBkMode (hdc=0xffffffff8a010722) returned 2 [0074.702] SetBkMode (hdc=0xffffffff8a010722, mode=1) returned 2 [0074.702] DrawTextExW (in: hdc=0xffffffff8a010722, lpchText="Check", cchText=5, lprc=0x14dea0, format=0x2415, lpdtp=0x2192a60 | out: lpchText="Check", lprc=0x14dea0) returned 13 [0074.703] DrawTextExW (in: hdc=0xffffffff8a010722, lpchText="Check", cchText=5, lprc=0x14e0b8, format=0x2015, lpdtp=0x2192a60 | out: lpchText="Check", lprc=0x14e0b8) returned 13 [0074.703] RestoreDC (hdc=0xffffffff8a010722, nSavedDC=-1) returned 1 [0074.703] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8a010722) returned 0x0 [0074.703] GetFocus () returned 0x1020c [0074.703] IsAppThemed () returned 0x1 [0074.703] GetThemeAppProperties () returned 0x3 [0074.703] GetThemeAppProperties () returned 0x3 [0074.703] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e438) returned 0x0 [0074.703] BitBlt (hdc=0x5010830, x=0, y=0, cx=408, cy=23, hdcSrc=0xffffffff8a010722, x1=0, y1=0, rop=0xcc0020) returned 1 [0074.703] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8a010722) returned 0x0 [0074.703] SelectPalette (hdc=0x5010830, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0074.703] SelectObject (hdc=0xffffffff8a010722, h=0x185000f) returned 0x29050250 [0074.703] DeleteDC (hdc=0xffffffff8a010722) returned 1 [0074.703] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0074.703] EndPaint (hWnd=0x1020c, lpPaint=0x14e418) returned 1 [0074.703] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0074.703] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0074.703] WaitMessage () returned 1 [0074.786] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.786] IsWindowUnicode (hWnd=0x401fa) returned 1 [0074.786] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.786] TranslateMessage (lpMsg=0x14edb0) returned 0 [0074.786] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0074.786] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.786] IsWindowUnicode (hWnd=0x401fa) returned 1 [0074.786] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0074.786] TranslateMessage (lpMsg=0x14edb0) returned 0 [0074.786] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0074.786] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x2a1, wParam=0x0, lParam=0x12e00f7) returned 0x0 [0074.786] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0074.786] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0074.786] WaitMessage () returned 1 [0075.285] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0075.285] IsWindowUnicode (hWnd=0x301ee) returned 1 [0075.285] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0075.285] TranslateMessage (lpMsg=0x14edb0) returned 0 [0075.285] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0075.286] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0075.286] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0075.286] CoTaskMemFree (pv=0xa692f0) [0075.286] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0075.286] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0075.286] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0075.286] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0075.286] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0075.286] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0075.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e500) returned 1 [0075.287] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0075.287] GetFileType (hFile=0x270) returned 0x1 [0075.287] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e470) returned 1 [0075.287] GetFileType (hFile=0x270) returned 0x1 [0075.287] ReadFile (in: hFile=0x270, lpBuffer=0x2194730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x2194730*, lpNumberOfBytesRead=0x14e5d8*=0x1, lpOverlapped=0x0) returned 1 [0075.287] ReadFile (in: hFile=0x270, lpBuffer=0x2194730, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x2194730*, lpNumberOfBytesRead=0x14e5d8*=0x0, lpOverlapped=0x0) returned 1 [0075.287] CloseHandle (hObject=0x270) returned 1 [0075.288] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0075.288] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0075.289] CoTaskMemFree (pv=0xa692f0) [0075.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0075.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0075.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0075.289] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0075.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0075.289] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0075.289] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e4c0) returned 1 [0075.289] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0075.290] GetFileType (hFile=0x270) returned 0x1 [0075.290] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e430) returned 1 [0075.290] GetFileType (hFile=0x270) returned 0x1 [0075.290] WriteFile (in: hFile=0x270, lpBuffer=0x2197a80*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x14e508, lpOverlapped=0x0 | out: lpBuffer=0x2197a80*, lpNumberOfBytesWritten=0x14e508*=0x1, lpOverlapped=0x0) returned 1 [0075.291] CloseHandle (hObject=0x270) returned 1 [0075.299] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0075.299] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0075.299] GetSystemMetrics (nIndex=42) returned 0 [0075.299] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e600, nMaxCount=5 | out: lpString="4:54") returned 4 [0075.299] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e600) returned 0x4 [0075.299] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0075.299] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0075.299] GetSystemMetrics (nIndex=42) returned 0 [0075.299] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e5a0, nMaxCount=5 | out: lpString="4:54") returned 4 [0075.299] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e5a0) returned 0x4 [0075.299] SetWindowTextW (hWnd=0x201da, lpString="4:53") returned 1 [0075.299] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xc, wParam=0x0, lParam=0x21957a4) returned 0x1 [0075.299] GetStockObject (i=5) returned 0x1900015 [0075.300] GetDlgItem (hDlg=0x401fa, nIDDlgItem=131546) returned 0x201da [0075.300] SendMessageW (hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0075.300] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0075.300] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0075.300] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0075.300] GetSystemMetrics (nIndex=42) returned 0 [0075.300] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e460, nMaxCount=5 | out: lpString="4:53") returned 4 [0075.300] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e460) returned 0x4 [0075.301] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0075.301] AdjustWindowRectEx (in: lpRect=0x14e478, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e478) returned 1 [0075.301] SelectObject (hdc=0x8010893, h=0x200a0899) returned 0x120a086d [0075.301] DrawTextExW (in: hdc=0x8010893, lpchText="4:53", cchText=4, lprc=0x14e3e8, format=0x2400, lpdtp=0x2198d38 | out: lpchText="4:53", lprc=0x14e3e8) returned 20 [0075.301] InvalidateRect (hWnd=0x201da, lpRect=0x0, bErase=1) returned 1 [0075.301] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0075.301] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0075.301] GetSystemMetrics (nIndex=42) returned 0 [0075.301] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14e3d0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0075.301] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14e3d0) returned 0xc [0075.301] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0075.301] IsWindowUnicode (hWnd=0x201da) returned 1 [0075.301] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0075.301] TranslateMessage (lpMsg=0x14edb0) returned 0 [0075.301] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0075.301] BeginPaint (in: hWnd=0x201da, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0xb010256 [0075.302] SelectPalette (hdc=0xb010256, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0075.302] CreateCompatibleDC (hdc=0xb010256) returned 0xffffffff8b010722 [0075.302] SelectObject (hdc=0xffffffff8b010722, h=0x29050250) returned 0x185000f [0075.302] GdipCreateFromHDC (hdc=0xffffffff8b010722, graphics=0x14e428) returned 0x0 [0075.302] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0075.302] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=40, height=20, combineMode=0x0) returned 0x0 [0075.302] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0075.302] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0075.302] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14e4b8) returned 0x0 [0075.302] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0075.302] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0075.302] LocalFree (hMem=0xa931f0) returned 0x0 [0075.302] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0075.302] GdipCreateRegion (region=0x14e450) returned 0x0 [0075.302] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0075.302] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0075.302] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0075.303] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0075.303] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0075.303] GetSystemMetrics (nIndex=42) returned 0 [0075.303] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:53") returned 4 [0075.303] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0075.303] GetClientRect (in: hWnd=0x201da, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0075.303] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0075.303] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0075.303] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0075.303] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0075.303] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0075.303] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0075.303] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0075.303] LocalFree (hMem=0xa931f0) returned 0x0 [0075.303] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0075.303] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0075.303] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0075.303] LocalFree (hMem=0xa931f0) returned 0x0 [0075.303] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0075.303] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0075.303] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0075.303] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0075.304] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0075.304] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0075.304] GetCurrentObject (hdc=0xffffffff8b010722, type=0x1) returned 0x1b00017 [0075.304] GetCurrentObject (hdc=0xffffffff8b010722, type=0x2) returned 0x1900010 [0075.304] GetCurrentObject (hdc=0xffffffff8b010722, type=0x7) returned 0x29050250 [0075.304] GetCurrentObject (hdc=0xffffffff8b010722, type=0x6) returned 0x18a002e [0075.304] SaveDC (hdc=0xffffffff8b010722) returned 1 [0075.304] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3104086f [0075.304] GetClipRgn (hdc=0xffffffff8b010722, hrgn=0x3104086f) returned 0 [0075.304] SelectClipRgn (hdc=0xffffffff8b010722, hrgn=0x4e040872) returned 2 [0075.304] DeleteObject (ho=0x3104086f) returned 1 [0075.304] DeleteObject (ho=0x4e040872) returned 1 [0075.304] OffsetViewportOrgEx (in: hdc=0xffffffff8b010722, x=0, y=0, lppt=0x2199438 | out: lppt=0x2199438) returned 1 [0075.304] GetNearestColor (hdc=0xffffffff8b010722, color=0xa0) returned 0xa0 [0075.304] CreateSolidBrush (color=0xa0) returned 0x56100860 [0075.304] FillRect (hDC=0xffffffff8b010722, lprc=0x14e1e8, hbr=0x56100860) returned 1 [0075.305] DeleteObject (ho=0x56100860) returned 1 [0075.305] RestoreDC (hdc=0xffffffff8b010722, nSavedDC=-1) returned 1 [0075.305] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8b010722) returned 0x0 [0075.305] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd860dbd) returned 0x0 [0075.305] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0075.305] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0075.305] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0075.305] GetSystemMetrics (nIndex=42) returned 0 [0075.305] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:53") returned 4 [0075.305] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0075.305] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0075.305] GetCurrentObject (hdc=0xffffffff8b010722, type=0x1) returned 0x1b00017 [0075.305] GetCurrentObject (hdc=0xffffffff8b010722, type=0x2) returned 0x1900010 [0075.305] GetCurrentObject (hdc=0xffffffff8b010722, type=0x7) returned 0x29050250 [0075.305] GetCurrentObject (hdc=0xffffffff8b010722, type=0x6) returned 0x18a002e [0075.305] SaveDC (hdc=0xffffffff8b010722) returned 1 [0075.305] GetNearestColor (hdc=0xffffffff8b010722, color=0xffffff) returned 0xffffff [0075.305] RestoreDC (hdc=0xffffffff8b010722, nSavedDC=-1) returned 1 [0075.305] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8b010722) returned 0x0 [0075.306] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0075.306] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0075.306] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0075.306] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0075.306] GetCurrentObject (hdc=0xffffffff8b010722, type=0x1) returned 0x1b00017 [0075.306] GetCurrentObject (hdc=0xffffffff8b010722, type=0x2) returned 0x1900010 [0075.306] GetCurrentObject (hdc=0xffffffff8b010722, type=0x7) returned 0x29050250 [0075.306] GetCurrentObject (hdc=0xffffffff8b010722, type=0x6) returned 0x18a002e [0075.306] SaveDC (hdc=0xffffffff8b010722) returned 1 [0075.306] GetTextAlign (hdc=0xffffffff8b010722) returned 0x0 [0075.306] GetTextColor (hdc=0xffffffff8b010722) returned 0x0 [0075.306] SetTextColor (hdc=0xffffffff8b010722, color=0xffffff) returned 0x0 [0075.306] GetCurrentObject (hdc=0xffffffff8b010722, type=0x6) returned 0x18a002e [0075.306] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0075.306] SelectObject (hdc=0xffffffff8b010722, h=0x200a0899) returned 0x18a002e [0075.306] GetBkMode (hdc=0xffffffff8b010722) returned 2 [0075.307] SetBkMode (hdc=0xffffffff8b010722, mode=1) returned 2 [0075.307] DrawTextExW (in: hdc=0xffffffff8b010722, lpchText="4:53", cchText=4, lprc=0x14e1c8, format=0x0, lpdtp=0x2199cc8 | out: lpchText="4:53", lprc=0x14e1c8) returned 20 [0075.307] RestoreDC (hdc=0xffffffff8b010722, nSavedDC=-1) returned 1 [0075.307] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8b010722) returned 0x0 [0075.307] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0075.307] BitBlt (hdc=0xb010256, x=0, y=0, cx=40, cy=20, hdcSrc=0xffffffff8b010722, x1=0, y1=0, rop=0xcc0020) returned 1 [0075.307] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8b010722) returned 0x0 [0075.307] SelectPalette (hdc=0xb010256, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0075.307] SelectObject (hdc=0xffffffff8b010722, h=0x185000f) returned 0x29050250 [0075.307] DeleteDC (hdc=0xffffffff8b010722) returned 1 [0075.307] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0075.307] EndPaint (hWnd=0x201da, lpPaint=0x14e448) returned 1 [0075.307] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0075.308] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0075.308] WaitMessage () returned 1 [0076.299] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0076.299] IsWindowUnicode (hWnd=0x301ee) returned 1 [0076.299] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0076.299] TranslateMessage (lpMsg=0x14edb0) returned 0 [0076.299] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0076.300] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0076.300] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0076.300] CoTaskMemFree (pv=0xa692f0) [0076.300] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0076.300] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0076.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0076.300] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0076.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0076.301] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0076.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e500) returned 1 [0076.301] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0076.301] GetFileType (hFile=0x270) returned 0x1 [0076.301] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e470) returned 1 [0076.301] GetFileType (hFile=0x270) returned 0x1 [0076.301] ReadFile (in: hFile=0x270, lpBuffer=0x219b860, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x219b860*, lpNumberOfBytesRead=0x14e5d8*=0x1, lpOverlapped=0x0) returned 1 [0076.301] ReadFile (in: hFile=0x270, lpBuffer=0x219b860, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x219b860*, lpNumberOfBytesRead=0x14e5d8*=0x0, lpOverlapped=0x0) returned 1 [0076.301] CloseHandle (hObject=0x270) returned 1 [0076.302] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0076.303] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0076.303] CoTaskMemFree (pv=0xa692f0) [0076.303] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0076.303] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0076.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0076.303] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0076.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0076.303] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0076.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e4c0) returned 1 [0076.303] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0076.304] GetFileType (hFile=0x270) returned 0x1 [0076.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e430) returned 1 [0076.304] GetFileType (hFile=0x270) returned 0x1 [0076.304] WriteFile (in: hFile=0x270, lpBuffer=0x219ebb0*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x14e508, lpOverlapped=0x0 | out: lpBuffer=0x219ebb0*, lpNumberOfBytesWritten=0x14e508*=0x1, lpOverlapped=0x0) returned 1 [0076.305] CloseHandle (hObject=0x270) returned 1 [0076.306] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0076.306] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0076.306] GetSystemMetrics (nIndex=42) returned 0 [0076.306] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e600, nMaxCount=5 | out: lpString="4:53") returned 4 [0076.306] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e600) returned 0x4 [0076.306] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0076.306] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0076.307] GetSystemMetrics (nIndex=42) returned 0 [0076.307] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e5a0, nMaxCount=5 | out: lpString="4:53") returned 4 [0076.307] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e5a0) returned 0x4 [0076.307] SetWindowTextW (hWnd=0x201da, lpString="4:52") returned 1 [0076.307] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xc, wParam=0x0, lParam=0x219c8d4) returned 0x1 [0076.307] GetStockObject (i=5) returned 0x1900015 [0076.307] GetDlgItem (hDlg=0x401fa, nIDDlgItem=131546) returned 0x201da [0076.307] SendMessageW (hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0076.307] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0076.307] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0076.307] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0076.307] GetSystemMetrics (nIndex=42) returned 0 [0076.307] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e460, nMaxCount=5 | out: lpString="4:52") returned 4 [0076.307] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e460) returned 0x4 [0076.308] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0076.308] AdjustWindowRectEx (in: lpRect=0x14e478, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e478) returned 1 [0076.308] DrawTextExW (in: hdc=0x8010893, lpchText="4:52", cchText=4, lprc=0x14e3e8, format=0x2400, lpdtp=0x219fe68 | out: lpchText="4:52", lprc=0x14e3e8) returned 20 [0076.308] InvalidateRect (hWnd=0x201da, lpRect=0x0, bErase=1) returned 1 [0076.308] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0076.308] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0076.308] GetSystemMetrics (nIndex=42) returned 0 [0076.308] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14e3d0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0076.308] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14e3d0) returned 0xc [0076.308] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0076.308] IsWindowUnicode (hWnd=0x201da) returned 1 [0076.308] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0076.308] TranslateMessage (lpMsg=0x14edb0) returned 0 [0076.308] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0076.308] BeginPaint (in: hWnd=0x201da, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0xb010256 [0076.308] SelectPalette (hdc=0xb010256, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0076.308] CreateCompatibleDC (hdc=0xb010256) returned 0xffffffff8c010722 [0076.308] SelectObject (hdc=0xffffffff8c010722, h=0x29050250) returned 0x185000f [0076.309] GdipCreateFromHDC (hdc=0xffffffff8c010722, graphics=0x14e428) returned 0x0 [0076.309] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0076.309] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=40, height=20, combineMode=0x0) returned 0x0 [0076.309] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0076.309] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0076.309] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14e4b8) returned 0x0 [0076.309] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0076.309] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0076.309] LocalFree (hMem=0xa931f0) returned 0x0 [0076.309] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0076.309] GdipCreateRegion (region=0x14e450) returned 0x0 [0076.309] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0076.309] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0076.309] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0076.309] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0076.309] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0076.309] GetSystemMetrics (nIndex=42) returned 0 [0076.309] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:52") returned 4 [0076.309] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0076.310] GetClientRect (in: hWnd=0x201da, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0076.310] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0076.310] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0076.310] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0076.310] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0076.310] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0076.310] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0076.310] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0076.310] LocalFree (hMem=0xa931f0) returned 0x0 [0076.310] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0076.310] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0076.310] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0076.310] LocalFree (hMem=0xa931f0) returned 0x0 [0076.310] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0076.310] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0076.310] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0076.310] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0076.310] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0076.311] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0076.311] GetCurrentObject (hdc=0xffffffff8c010722, type=0x1) returned 0x1b00017 [0076.311] GetCurrentObject (hdc=0xffffffff8c010722, type=0x2) returned 0x1900010 [0076.311] GetCurrentObject (hdc=0xffffffff8c010722, type=0x7) returned 0x29050250 [0076.311] GetCurrentObject (hdc=0xffffffff8c010722, type=0x6) returned 0x18a002e [0076.311] SaveDC (hdc=0xffffffff8c010722) returned 1 [0076.311] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x4f040872 [0076.311] GetClipRgn (hdc=0xffffffff8c010722, hrgn=0x4f040872) returned 0 [0076.311] SelectClipRgn (hdc=0xffffffff8c010722, hrgn=0x3404086f) returned 2 [0076.311] DeleteObject (ho=0x4f040872) returned 1 [0076.311] DeleteObject (ho=0x3404086f) returned 1 [0076.311] OffsetViewportOrgEx (in: hdc=0xffffffff8c010722, x=0, y=0, lppt=0x21a0568 | out: lppt=0x21a0568) returned 1 [0076.311] GetNearestColor (hdc=0xffffffff8c010722, color=0xa0) returned 0xa0 [0076.311] CreateSolidBrush (color=0xa0) returned 0x57100860 [0076.311] FillRect (hDC=0xffffffff8c010722, lprc=0x14e1e8, hbr=0x57100860) returned 1 [0076.311] DeleteObject (ho=0x57100860) returned 1 [0076.312] RestoreDC (hdc=0xffffffff8c010722, nSavedDC=-1) returned 1 [0076.312] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8c010722) returned 0x0 [0076.312] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd840dbd) returned 0x0 [0076.312] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0076.312] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0076.312] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0076.312] GetSystemMetrics (nIndex=42) returned 0 [0076.312] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:52") returned 4 [0076.312] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0076.312] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0076.312] GetCurrentObject (hdc=0xffffffff8c010722, type=0x1) returned 0x1b00017 [0076.312] GetCurrentObject (hdc=0xffffffff8c010722, type=0x2) returned 0x1900010 [0076.312] GetCurrentObject (hdc=0xffffffff8c010722, type=0x7) returned 0x29050250 [0076.312] GetCurrentObject (hdc=0xffffffff8c010722, type=0x6) returned 0x18a002e [0076.312] SaveDC (hdc=0xffffffff8c010722) returned 1 [0076.312] GetNearestColor (hdc=0xffffffff8c010722, color=0xffffff) returned 0xffffff [0076.312] RestoreDC (hdc=0xffffffff8c010722, nSavedDC=-1) returned 1 [0076.313] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8c010722) returned 0x0 [0076.313] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0076.313] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0076.313] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0076.313] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0076.313] GetCurrentObject (hdc=0xffffffff8c010722, type=0x1) returned 0x1b00017 [0076.313] GetCurrentObject (hdc=0xffffffff8c010722, type=0x2) returned 0x1900010 [0076.313] GetCurrentObject (hdc=0xffffffff8c010722, type=0x7) returned 0x29050250 [0076.313] GetCurrentObject (hdc=0xffffffff8c010722, type=0x6) returned 0x18a002e [0076.313] SaveDC (hdc=0xffffffff8c010722) returned 1 [0076.313] GetTextAlign (hdc=0xffffffff8c010722) returned 0x0 [0076.313] GetTextColor (hdc=0xffffffff8c010722) returned 0x0 [0076.313] SetTextColor (hdc=0xffffffff8c010722, color=0xffffff) returned 0x0 [0076.313] GetCurrentObject (hdc=0xffffffff8c010722, type=0x6) returned 0x18a002e [0076.313] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0076.314] SelectObject (hdc=0xffffffff8c010722, h=0x200a0899) returned 0x18a002e [0076.314] GetBkMode (hdc=0xffffffff8c010722) returned 2 [0076.314] SetBkMode (hdc=0xffffffff8c010722, mode=1) returned 2 [0076.314] DrawTextExW (in: hdc=0xffffffff8c010722, lpchText="4:52", cchText=4, lprc=0x14e1c8, format=0x0, lpdtp=0x21a0df8 | out: lpchText="4:52", lprc=0x14e1c8) returned 20 [0076.314] RestoreDC (hdc=0xffffffff8c010722, nSavedDC=-1) returned 1 [0076.314] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8c010722) returned 0x0 [0076.314] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0076.314] BitBlt (hdc=0xb010256, x=0, y=0, cx=40, cy=20, hdcSrc=0xffffffff8c010722, x1=0, y1=0, rop=0xcc0020) returned 1 [0076.314] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8c010722) returned 0x0 [0076.314] SelectPalette (hdc=0xb010256, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0076.315] SelectObject (hdc=0xffffffff8c010722, h=0x185000f) returned 0x29050250 [0076.315] DeleteDC (hdc=0xffffffff8c010722) returned 1 [0076.315] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0076.315] EndPaint (hWnd=0x201da, lpPaint=0x14e448) returned 1 [0076.315] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0076.315] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0076.315] WaitMessage () returned 1 [0077.328] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.328] IsWindowUnicode (hWnd=0x301ee) returned 1 [0077.328] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.328] TranslateMessage (lpMsg=0x14edb0) returned 0 [0077.328] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0077.329] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0077.329] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0077.329] CoTaskMemFree (pv=0xa692f0) [0077.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0077.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0077.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0077.330] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0077.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0077.330] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0077.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e500) returned 1 [0077.330] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0077.330] GetFileType (hFile=0x270) returned 0x1 [0077.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e470) returned 1 [0077.330] GetFileType (hFile=0x270) returned 0x1 [0077.330] ReadFile (in: hFile=0x270, lpBuffer=0x21a2990, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x21a2990*, lpNumberOfBytesRead=0x14e5d8*=0x1, lpOverlapped=0x0) returned 1 [0077.330] ReadFile (in: hFile=0x270, lpBuffer=0x21a2990, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x21a2990*, lpNumberOfBytesRead=0x14e5d8*=0x0, lpOverlapped=0x0) returned 1 [0077.331] CloseHandle (hObject=0x270) returned 1 [0077.332] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0077.332] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0077.332] CoTaskMemFree (pv=0xa692f0) [0077.332] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0077.332] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0077.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0077.332] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0077.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0077.332] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0077.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e4c0) returned 1 [0077.333] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0077.336] GetFileType (hFile=0x270) returned 0x1 [0077.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e430) returned 1 [0077.336] GetFileType (hFile=0x270) returned 0x1 [0077.336] WriteFile (in: hFile=0x270, lpBuffer=0x21a5ce0*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x14e508, lpOverlapped=0x0 | out: lpBuffer=0x21a5ce0*, lpNumberOfBytesWritten=0x14e508*=0x2, lpOverlapped=0x0) returned 1 [0077.337] CloseHandle (hObject=0x270) returned 1 [0077.338] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0077.338] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0077.338] GetSystemMetrics (nIndex=42) returned 0 [0077.338] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e600, nMaxCount=5 | out: lpString="4:52") returned 4 [0077.338] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e600) returned 0x4 [0077.338] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0077.338] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0077.338] GetSystemMetrics (nIndex=42) returned 0 [0077.338] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e5a0, nMaxCount=5 | out: lpString="4:52") returned 4 [0077.338] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e5a0) returned 0x4 [0077.338] SetWindowTextW (hWnd=0x201da, lpString="4:51") returned 1 [0077.338] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xc, wParam=0x0, lParam=0x21a3a04) returned 0x1 [0077.338] GetStockObject (i=5) returned 0x1900015 [0077.338] GetDlgItem (hDlg=0x401fa, nIDDlgItem=131546) returned 0x201da [0077.338] SendMessageW (hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0077.338] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0077.338] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0077.338] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0077.338] GetSystemMetrics (nIndex=42) returned 0 [0077.339] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e460, nMaxCount=5 | out: lpString="4:51") returned 4 [0077.339] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e460) returned 0x4 [0077.339] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0077.339] AdjustWindowRectEx (in: lpRect=0x14e478, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e478) returned 1 [0077.339] DrawTextExW (in: hdc=0x8010893, lpchText="4:51", cchText=4, lprc=0x14e3e8, format=0x2400, lpdtp=0x21a6f70 | out: lpchText="4:51", lprc=0x14e3e8) returned 20 [0077.339] InvalidateRect (hWnd=0x201da, lpRect=0x0, bErase=1) returned 1 [0077.339] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0077.339] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0077.339] GetSystemMetrics (nIndex=42) returned 0 [0077.339] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14e3d0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0077.339] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14e3d0) returned 0xc [0077.339] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.339] IsWindowUnicode (hWnd=0x201da) returned 1 [0077.339] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.339] TranslateMessage (lpMsg=0x14edb0) returned 0 [0077.339] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0077.340] BeginPaint (in: hWnd=0x201da, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0xb010256 [0077.340] SelectPalette (hdc=0xb010256, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0077.340] CreateCompatibleDC (hdc=0xb010256) returned 0xffffffff8d010722 [0077.340] SelectObject (hdc=0xffffffff8d010722, h=0x29050250) returned 0x185000f [0077.340] GdipCreateFromHDC (hdc=0xffffffff8d010722, graphics=0x14e428) returned 0x0 [0077.340] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0077.340] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=40, height=20, combineMode=0x0) returned 0x0 [0077.340] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0077.340] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0077.340] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14e4b8) returned 0x0 [0077.340] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.340] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0077.340] LocalFree (hMem=0xa931f0) returned 0x0 [0077.340] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0077.340] GdipCreateRegion (region=0x14e450) returned 0x0 [0077.340] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0077.340] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0077.340] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0077.340] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0077.341] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0077.341] GetSystemMetrics (nIndex=42) returned 0 [0077.341] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:51") returned 4 [0077.341] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0077.341] GetClientRect (in: hWnd=0x201da, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0077.341] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0077.341] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0077.341] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0077.341] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0077.341] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0077.341] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.341] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0077.341] LocalFree (hMem=0xa931f0) returned 0x0 [0077.341] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0077.341] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.341] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0077.341] LocalFree (hMem=0xa931f0) returned 0x0 [0077.341] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0077.341] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0077.341] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0077.341] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0077.341] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0077.341] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0077.342] GetCurrentObject (hdc=0xffffffff8d010722, type=0x1) returned 0x1b00017 [0077.342] GetCurrentObject (hdc=0xffffffff8d010722, type=0x2) returned 0x1900010 [0077.342] GetCurrentObject (hdc=0xffffffff8d010722, type=0x7) returned 0x29050250 [0077.342] GetCurrentObject (hdc=0xffffffff8d010722, type=0x6) returned 0x18a002e [0077.342] SaveDC (hdc=0xffffffff8d010722) returned 1 [0077.342] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3504086f [0077.342] GetClipRgn (hdc=0xffffffff8d010722, hrgn=0x3504086f) returned 0 [0077.342] SelectClipRgn (hdc=0xffffffff8d010722, hrgn=0x52040872) returned 2 [0077.342] DeleteObject (ho=0x3504086f) returned 1 [0077.350] DeleteObject (ho=0x52040872) returned 1 [0077.350] OffsetViewportOrgEx (in: hdc=0xffffffff8d010722, x=0, y=0, lppt=0x21a7670 | out: lppt=0x21a7670) returned 1 [0077.350] GetNearestColor (hdc=0xffffffff8d010722, color=0xa0) returned 0xa0 [0077.350] CreateSolidBrush (color=0xa0) returned 0x58100860 [0077.350] FillRect (hDC=0xffffffff8d010722, lprc=0x14e1e8, hbr=0x58100860) returned 1 [0077.350] DeleteObject (ho=0x58100860) returned 1 [0077.350] RestoreDC (hdc=0xffffffff8d010722, nSavedDC=-1) returned 1 [0077.350] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8d010722) returned 0x0 [0077.350] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd820dbd) returned 0x0 [0077.350] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0077.350] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0077.350] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0077.350] GetSystemMetrics (nIndex=42) returned 0 [0077.350] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:51") returned 4 [0077.350] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0077.350] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0077.351] GetCurrentObject (hdc=0xffffffff8d010722, type=0x1) returned 0x1b00017 [0077.351] GetCurrentObject (hdc=0xffffffff8d010722, type=0x2) returned 0x1900010 [0077.351] GetCurrentObject (hdc=0xffffffff8d010722, type=0x7) returned 0x29050250 [0077.351] GetCurrentObject (hdc=0xffffffff8d010722, type=0x6) returned 0x18a002e [0077.351] SaveDC (hdc=0xffffffff8d010722) returned 1 [0077.351] GetNearestColor (hdc=0xffffffff8d010722, color=0xffffff) returned 0xffffff [0077.351] RestoreDC (hdc=0xffffffff8d010722, nSavedDC=-1) returned 1 [0077.351] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8d010722) returned 0x0 [0077.351] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0077.351] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0077.351] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0077.351] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0077.351] GetCurrentObject (hdc=0xffffffff8d010722, type=0x1) returned 0x1b00017 [0077.351] GetCurrentObject (hdc=0xffffffff8d010722, type=0x2) returned 0x1900010 [0077.351] GetCurrentObject (hdc=0xffffffff8d010722, type=0x7) returned 0x29050250 [0077.351] GetCurrentObject (hdc=0xffffffff8d010722, type=0x6) returned 0x18a002e [0077.352] SaveDC (hdc=0xffffffff8d010722) returned 1 [0077.352] GetTextAlign (hdc=0xffffffff8d010722) returned 0x0 [0077.352] GetTextColor (hdc=0xffffffff8d010722) returned 0x0 [0077.352] SetTextColor (hdc=0xffffffff8d010722, color=0xffffff) returned 0x0 [0077.352] GetCurrentObject (hdc=0xffffffff8d010722, type=0x6) returned 0x18a002e [0077.352] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0077.352] SelectObject (hdc=0xffffffff8d010722, h=0x200a0899) returned 0x18a002e [0077.352] GetBkMode (hdc=0xffffffff8d010722) returned 2 [0077.352] SetBkMode (hdc=0xffffffff8d010722, mode=1) returned 2 [0077.352] DrawTextExW (in: hdc=0xffffffff8d010722, lpchText="4:51", cchText=4, lprc=0x14e1c8, format=0x0, lpdtp=0x21a7f00 | out: lpchText="4:51", lprc=0x14e1c8) returned 20 [0077.352] RestoreDC (hdc=0xffffffff8d010722, nSavedDC=-1) returned 1 [0077.352] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8d010722) returned 0x0 [0077.353] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0077.353] BitBlt (hdc=0xb010256, x=0, y=0, cx=40, cy=20, hdcSrc=0xffffffff8d010722, x1=0, y1=0, rop=0xcc0020) returned 1 [0077.353] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8d010722) returned 0x0 [0077.353] SelectPalette (hdc=0xb010256, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0077.353] SelectObject (hdc=0xffffffff8d010722, h=0x185000f) returned 0x29050250 [0077.353] DeleteDC (hdc=0xffffffff8d010722) returned 1 [0077.353] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0077.353] EndPaint (hWnd=0x201da, lpPaint=0x14e448) returned 1 [0077.353] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.353] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.353] WaitMessage () returned 1 [0077.417] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.417] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.417] IsWindowUnicode (hWnd=0x1020c) returned 1 [0077.417] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.417] TranslateMessage (lpMsg=0x14edb0) returned 0 [0077.417] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0077.417] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0077.417] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.417] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.417] IsWindowUnicode (hWnd=0x1020c) returned 1 [0077.417] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.417] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.418] SetCursor (hCursor=0x10003) returned 0x10003 [0077.418] TranslateMessage (lpMsg=0x14edb0) returned 0 [0077.418] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0077.418] _TrackMouseEvent (in: lpEventTrack=0x214a8d0 | out: lpEventTrack=0x214a8d0) returned 1 [0077.418] SendMessageW (hWnd=0x1020c, Msg=0xc12f, wParam=0x0, lParam=0x0) returned 0x0 [0077.418] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0xc12f, wParam=0x0, lParam=0x0) returned 0x0 [0077.418] InvalidateRect (hWnd=0x1020c, lpRect=0x0, bErase=0) returned 1 [0077.418] GetKeyState (nVirtKey=1) returned 1 [0077.418] GetKeyState (nVirtKey=2) returned 0 [0077.418] GetKeyState (nVirtKey=4) returned 0 [0077.418] GetKeyState (nVirtKey=5) returned 0 [0077.418] GetKeyState (nVirtKey=6) returned 0 [0077.418] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.418] IsWindowUnicode (hWnd=0x1020c) returned 1 [0077.418] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.418] TranslateMessage (lpMsg=0x14edb0) returned 0 [0077.418] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0077.418] BeginPaint (in: hWnd=0x1020c, lpPaint=0x14e478 | out: lpPaint=0x14e478) returned 0x5010830 [0077.418] SelectPalette (hdc=0x5010830, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0077.419] CreateCompatibleDC (hdc=0x5010830) returned 0xffffffff8e010722 [0077.419] SelectObject (hdc=0xffffffff8e010722, h=0x29050250) returned 0x185000f [0077.419] GdipCreateFromHDC (hdc=0xffffffff8e010722, graphics=0x14e3f8) returned 0x0 [0077.419] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0077.419] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=408, height=23, combineMode=0x0) returned 0x0 [0077.419] GdipCreateMatrix (matrix=0x14e420) returned 0x0 [0077.419] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0077.419] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14e488) returned 0x0 [0077.419] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.419] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0077.419] LocalFree (hMem=0xa931f0) returned 0x0 [0077.419] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0077.419] GdipCreateRegion (region=0x14e420) returned 0x0 [0077.419] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0077.420] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e480) returned 0x0 [0077.420] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e520) returned 0x0 [0077.420] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd800dbd) returned 0x0 [0077.420] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0077.420] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e198) returned 0x0 [0077.420] GetCurrentObject (hdc=0xffffffff8e010722, type=0x1) returned 0x1b00017 [0077.420] GetCurrentObject (hdc=0xffffffff8e010722, type=0x2) returned 0x1900010 [0077.420] GetCurrentObject (hdc=0xffffffff8e010722, type=0x7) returned 0x29050250 [0077.420] GetCurrentObject (hdc=0xffffffff8e010722, type=0x6) returned 0x18a002e [0077.420] SaveDC (hdc=0xffffffff8e010722) returned 1 [0077.420] GetNearestColor (hdc=0xffffffff8e010722, color=0xa0) returned 0xa0 [0077.420] GetNearestColor (hdc=0xffffffff8e010722, color=0x35) returned 0x35 [0077.420] GetNearestColor (hdc=0xffffffff8e010722, color=0x0) returned 0x0 [0077.421] GetNearestColor (hdc=0xffffffff8e010722, color=0x4848e5) returned 0x4848e5 [0077.421] GetNearestColor (hdc=0xffffffff8e010722, color=0x0) returned 0x0 [0077.421] GetNearestColor (hdc=0xffffffff8e010722, color=0x5151ff) returned 0x5151ff [0077.421] GetNearestColor (hdc=0xffffffff8e010722, color=0x4848e5) returned 0x4848e5 [0077.421] GetNearestColor (hdc=0xffffffff8e010722, color=0xc0) returned 0xc0 [0077.421] GetNearestColor (hdc=0xffffffff8e010722, color=0x0) returned 0x0 [0077.421] RestoreDC (hdc=0xffffffff8e010722, nSavedDC=-1) returned 1 [0077.421] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8e010722) returned 0x0 [0077.421] IsAppThemed () returned 0x1 [0077.421] GetThemeAppProperties () returned 0x3 [0077.421] GetThemeAppProperties () returned 0x3 [0077.421] IsAppThemed () returned 0x1 [0077.421] GetThemeAppProperties () returned 0x3 [0077.421] GetThemeAppProperties () returned 0x3 [0077.421] SelectObject (hdc=0x8010893, h=0x120a086d) returned 0x200a0899 [0077.421] DrawTextExW (in: hdc=0x8010893, lpchText="Check", cchText=5, lprc=0x14de08, format=0x2415, lpdtp=0x21a8ab0 | out: lpchText="Check", lprc=0x14de08) returned 13 [0077.421] IsAppThemed () returned 0x1 [0077.421] GetThemeAppProperties () returned 0x3 [0077.421] GetThemeAppProperties () returned 0x3 [0077.422] IsAppThemed () returned 0x1 [0077.422] GetThemeAppProperties () returned 0x3 [0077.422] GetThemeAppProperties () returned 0x3 [0077.422] IsAppThemed () returned 0x1 [0077.422] GetThemeAppProperties () returned 0x3 [0077.422] GetThemeAppProperties () returned 0x3 [0077.422] IsAppThemed () returned 0x1 [0077.422] GetThemeAppProperties () returned 0x3 [0077.422] GetThemeAppProperties () returned 0x3 [0077.422] IsThemePartDefined () returned 0x1 [0077.422] IsAppThemed () returned 0x1 [0077.422] GetThemeAppProperties () returned 0x3 [0077.422] GetThemeAppProperties () returned 0x3 [0077.422] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0077.422] IsAppThemed () returned 0x1 [0077.422] GetThemeAppProperties () returned 0x3 [0077.422] GetThemeAppProperties () returned 0x3 [0077.422] IsAppThemed () returned 0x1 [0077.422] GetThemeAppProperties () returned 0x3 [0077.422] GetThemeAppProperties () returned 0x3 [0077.422] IsThemePartDefined () returned 0x1 [0077.422] GdipCreateRegion (region=0x14df00) returned 0x0 [0077.422] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0077.422] GdipCreateMatrix (matrix=0x14df00) returned 0x0 [0077.422] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0077.422] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14df68) returned 0x0 [0077.422] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.422] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0077.422] LocalFree (hMem=0xa931f0) returned 0x0 [0077.422] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.422] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0077.423] LocalFree (hMem=0xa931f0) returned 0x0 [0077.423] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0077.423] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14dfd0) returned 0x0 [0077.423] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df90) returned 0x0 [0077.423] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df90) returned 0x0 [0077.423] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0077.423] GdipGetDC (graphics=0x1afd81d0, hdc=0x14dfd8) returned 0x0 [0077.423] GetCurrentObject (hdc=0xffffffff8e010722, type=0x1) returned 0x1b00017 [0077.423] GetCurrentObject (hdc=0xffffffff8e010722, type=0x2) returned 0x1900010 [0077.423] GetCurrentObject (hdc=0xffffffff8e010722, type=0x7) returned 0x29050250 [0077.423] GetCurrentObject (hdc=0xffffffff8e010722, type=0x6) returned 0x18a002e [0077.423] SaveDC (hdc=0xffffffff8e010722) returned 1 [0077.423] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x53040872 [0077.423] GetClipRgn (hdc=0xffffffff8e010722, hrgn=0x53040872) returned 0 [0077.423] SelectClipRgn (hdc=0xffffffff8e010722, hrgn=0x3804086f) returned 2 [0077.423] DeleteObject (ho=0x53040872) returned 1 [0077.423] DeleteObject (ho=0x3804086f) returned 1 [0077.423] OffsetViewportOrgEx (in: hdc=0xffffffff8e010722, x=0, y=0, lppt=0x21a9498 | out: lppt=0x21a9498) returned 1 [0077.423] DrawThemeParentBackground () returned 0x0 [0077.423] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14db88 | out: lpwndpl=0x14db88) returned 1 [0077.423] GetClientRect (in: hWnd=0x401fa, lpRect=0x14daa0 | out: lpRect=0x14daa0) returned 1 [0077.424] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0077.424] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0077.424] GetSystemMetrics (nIndex=42) returned 0 [0077.424] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d800, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0077.424] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d800) returned 0xc [0077.424] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d888 | out: lpRect=0x14d888) returned 1 [0077.424] GetCurrentObject (hdc=0xffffffff8e010722, type=0x1) returned 0x1b00017 [0077.424] GetCurrentObject (hdc=0xffffffff8e010722, type=0x2) returned 0x1900010 [0077.424] GetCurrentObject (hdc=0xffffffff8e010722, type=0x7) returned 0x29050250 [0077.424] GetCurrentObject (hdc=0xffffffff8e010722, type=0x6) returned 0x18a002e [0077.424] SaveDC (hdc=0xffffffff8e010722) returned 2 [0077.424] GetNearestColor (hdc=0xffffffff8e010722, color=0xa0) returned 0xa0 [0077.424] CreateSolidBrush (color=0xa0) returned 0x59100860 [0077.425] FillRect (hDC=0xffffffff8e010722, lprc=0x14d578, hbr=0x59100860) returned 1 [0077.425] DeleteObject (ho=0x59100860) returned 1 [0077.425] RestoreDC (hdc=0xffffffff8e010722, nSavedDC=-1) returned 1 [0077.426] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0077.426] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0077.426] GetSystemMetrics (nIndex=42) returned 0 [0077.426] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0077.426] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0077.426] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d7b8 | out: lpRect=0x14d7b8) returned 1 [0077.426] GetCurrentObject (hdc=0xffffffff8e010722, type=0x1) returned 0x1b00017 [0077.427] GetCurrentObject (hdc=0xffffffff8e010722, type=0x2) returned 0x1900010 [0077.427] GetCurrentObject (hdc=0xffffffff8e010722, type=0x7) returned 0x29050250 [0077.427] GetCurrentObject (hdc=0xffffffff8e010722, type=0x6) returned 0x18a002e [0077.427] SaveDC (hdc=0xffffffff8e010722) returned 2 [0077.427] GetNearestColor (hdc=0xffffffff8e010722, color=0xa0) returned 0xa0 [0077.427] CreateSolidBrush (color=0xa0) returned 0x5a100860 [0077.427] FillRect (hDC=0xffffffff8e010722, lprc=0x14d4a8, hbr=0x5a100860) returned 1 [0077.427] DeleteObject (ho=0x5a100860) returned 1 [0077.427] RestoreDC (hdc=0xffffffff8e010722, nSavedDC=-1) returned 1 [0077.427] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0077.427] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0077.427] GetSystemMetrics (nIndex=42) returned 0 [0077.427] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0077.427] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0077.428] RestoreDC (hdc=0xffffffff8e010722, nSavedDC=-1) returned 1 [0077.428] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8e010722) returned 0x0 [0077.428] IsAppThemed () returned 0x1 [0077.428] GetThemeAppProperties () returned 0x3 [0077.428] GetThemeAppProperties () returned 0x3 [0077.428] IsAppThemed () returned 0x1 [0077.428] GetThemeAppProperties () returned 0x3 [0077.428] GetThemeAppProperties () returned 0x3 [0077.428] IsThemePartDefined () returned 0x1 [0077.428] GdipCreateRegion (region=0x14dea0) returned 0x0 [0077.428] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0077.428] GdipCreateMatrix (matrix=0x14dea0) returned 0x0 [0077.428] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0077.428] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14df08) returned 0x0 [0077.428] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.428] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0077.428] LocalFree (hMem=0xa931f0) returned 0x0 [0077.428] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.429] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0077.429] LocalFree (hMem=0xa931f0) returned 0x0 [0077.429] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0077.429] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df70) returned 0x0 [0077.429] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df30) returned 0x0 [0077.429] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df30) returned 0x0 [0077.429] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0077.429] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df78) returned 0x0 [0077.429] GetCurrentObject (hdc=0xffffffff8e010722, type=0x1) returned 0x1b00017 [0077.429] GetCurrentObject (hdc=0xffffffff8e010722, type=0x2) returned 0x1900010 [0077.429] GetCurrentObject (hdc=0xffffffff8e010722, type=0x7) returned 0x29050250 [0077.429] GetCurrentObject (hdc=0xffffffff8e010722, type=0x6) returned 0x18a002e [0077.429] SaveDC (hdc=0xffffffff8e010722) returned 1 [0077.429] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3904086f [0077.429] GetClipRgn (hdc=0xffffffff8e010722, hrgn=0x3904086f) returned 0 [0077.430] SelectClipRgn (hdc=0xffffffff8e010722, hrgn=0x55040872) returned 2 [0077.430] DeleteObject (ho=0x3904086f) returned 1 [0077.430] DeleteObject (ho=0x55040872) returned 1 [0077.430] OffsetViewportOrgEx (in: hdc=0xffffffff8e010722, x=0, y=0, lppt=0x21aa2a0 | out: lppt=0x21aa2a0) returned 1 [0077.430] IsAppThemed () returned 0x1 [0077.430] GetThemeAppProperties () returned 0x3 [0077.430] GetThemeAppProperties () returned 0x3 [0077.430] DrawThemeBackground () returned 0x0 [0077.430] RestoreDC (hdc=0xffffffff8e010722, nSavedDC=-1) returned 1 [0077.430] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8e010722) returned 0x0 [0077.430] GdipCreateRegion (region=0x14de90) returned 0x0 [0077.430] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0077.430] GdipCreateMatrix (matrix=0x14de90) returned 0x0 [0077.430] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0077.431] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14def8) returned 0x0 [0077.431] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.431] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0077.431] LocalFree (hMem=0xa931f0) returned 0x0 [0077.431] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.431] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0077.431] LocalFree (hMem=0xa931f0) returned 0x0 [0077.431] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0077.431] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df60) returned 0x0 [0077.431] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df20) returned 0x0 [0077.431] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df20) returned 0x0 [0077.431] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0077.431] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df68) returned 0x0 [0077.431] GetCurrentObject (hdc=0xffffffff8e010722, type=0x1) returned 0x1b00017 [0077.431] GetCurrentObject (hdc=0xffffffff8e010722, type=0x2) returned 0x1900010 [0077.431] GetCurrentObject (hdc=0xffffffff8e010722, type=0x7) returned 0x29050250 [0077.432] GetCurrentObject (hdc=0xffffffff8e010722, type=0x6) returned 0x18a002e [0077.432] SaveDC (hdc=0xffffffff8e010722) returned 1 [0077.432] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x56040872 [0077.432] GetClipRgn (hdc=0xffffffff8e010722, hrgn=0x56040872) returned 0 [0077.432] SelectClipRgn (hdc=0xffffffff8e010722, hrgn=0x3a04086f) returned 2 [0077.432] DeleteObject (ho=0x56040872) returned 1 [0077.432] DeleteObject (ho=0x3a04086f) returned 1 [0077.432] OffsetViewportOrgEx (in: hdc=0xffffffff8e010722, x=0, y=0, lppt=0x21aa778 | out: lppt=0x21aa778) returned 1 [0077.432] IsAppThemed () returned 0x1 [0077.432] GetThemeAppProperties () returned 0x3 [0077.432] GetThemeAppProperties () returned 0x3 [0077.432] GetThemeBackgroundContentRect () returned 0x0 [0077.432] RestoreDC (hdc=0xffffffff8e010722, nSavedDC=-1) returned 1 [0077.432] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8e010722) returned 0x0 [0077.432] IsAppThemed () returned 0x1 [0077.432] GetThemeAppProperties () returned 0x3 [0077.432] GetThemeAppProperties () returned 0x3 [0077.433] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e148) returned 0x0 [0077.433] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e128) returned 0x0 [0077.433] GetCurrentObject (hdc=0xffffffff8e010722, type=0x1) returned 0x1b00017 [0077.433] GetCurrentObject (hdc=0xffffffff8e010722, type=0x2) returned 0x1900010 [0077.433] GetCurrentObject (hdc=0xffffffff8e010722, type=0x7) returned 0x29050250 [0077.433] GetCurrentObject (hdc=0xffffffff8e010722, type=0x6) returned 0x18a002e [0077.433] SaveDC (hdc=0xffffffff8e010722) returned 1 [0077.433] GetTextAlign (hdc=0xffffffff8e010722) returned 0x0 [0077.433] GetTextColor (hdc=0xffffffff8e010722) returned 0x0 [0077.433] GetCurrentObject (hdc=0xffffffff8e010722, type=0x6) returned 0x18a002e [0077.433] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dc60 | out: pv=0x14dc60) returned 92 [0077.433] SelectObject (hdc=0xffffffff8e010722, h=0x120a086d) returned 0x18a002e [0077.433] GetBkMode (hdc=0xffffffff8e010722) returned 2 [0077.433] SetBkMode (hdc=0xffffffff8e010722, mode=1) returned 2 [0077.433] DrawTextExW (in: hdc=0xffffffff8e010722, lpchText="Check", cchText=5, lprc=0x14dea0, format=0x2415, lpdtp=0x21aad58 | out: lpchText="Check", lprc=0x14dea0) returned 13 [0077.433] DrawTextExW (in: hdc=0xffffffff8e010722, lpchText="Check", cchText=5, lprc=0x14e0b8, format=0x2015, lpdtp=0x21aad58 | out: lpchText="Check", lprc=0x14e0b8) returned 13 [0077.434] RestoreDC (hdc=0xffffffff8e010722, nSavedDC=-1) returned 1 [0077.434] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8e010722) returned 0x0 [0077.434] GetFocus () returned 0x1020c [0077.434] IsAppThemed () returned 0x1 [0077.434] GetThemeAppProperties () returned 0x3 [0077.434] GetThemeAppProperties () returned 0x3 [0077.434] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e438) returned 0x0 [0077.434] BitBlt (hdc=0x5010830, x=0, y=0, cx=408, cy=23, hdcSrc=0xffffffff8e010722, x1=0, y1=0, rop=0xcc0020) returned 1 [0077.434] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8e010722) returned 0x0 [0077.434] SelectPalette (hdc=0x5010830, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0077.435] SelectObject (hdc=0xffffffff8e010722, h=0x185000f) returned 0x29050250 [0077.435] DeleteDC (hdc=0xffffffff8e010722) returned 1 [0077.435] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0077.435] EndPaint (hWnd=0x1020c, lpPaint=0x14e418) returned 1 [0077.435] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.435] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.435] WaitMessage () returned 1 [0077.516] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.516] IsWindowUnicode (hWnd=0x1020c) returned 1 [0077.516] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.516] TranslateMessage (lpMsg=0x14edb0) returned 0 [0077.516] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0077.516] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.516] IsWindowUnicode (hWnd=0x1020c) returned 1 [0077.516] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.516] TranslateMessage (lpMsg=0x14edb0) returned 0 [0077.516] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0077.516] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x2a1, wParam=0x0, lParam=0xb00cc) returned 0x0 [0077.516] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.516] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.516] WaitMessage () returned 1 [0077.642] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.643] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.643] IsWindowUnicode (hWnd=0x1020c) returned 1 [0077.643] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.643] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.643] GetDlgItem (hDlg=0x401fa, nIDDlgItem=0) returned 0x0 [0077.643] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x210, wParam=0x201, lParam=0x1b50170) returned 0x0 [0077.643] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x21, wParam=0x401fa, lParam=0x2010001) returned 0x1 [0077.643] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x21, wParam=0x401fa, lParam=0x2010001) returned 0x1 [0077.643] SetCursor (hCursor=0x10003) returned 0x10003 [0077.644] TranslateMessage (lpMsg=0x14edb0) returned 0 [0077.644] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0077.644] GetKeyState (nVirtKey=1) returned -128 [0077.644] GetKeyState (nVirtKey=2) returned 0 [0077.644] GetKeyState (nVirtKey=4) returned 0 [0077.644] GetKeyState (nVirtKey=5) returned 0 [0077.644] GetKeyState (nVirtKey=6) returned 0 [0077.644] IsWindowVisible (hWnd=0x1020c) returned 1 [0077.644] IsWindowEnabled (hWnd=0x1020c) returned 1 [0077.644] SetFocus (hWnd=0x1020c) returned 0x1020c [0077.644] GetFocus () returned 0x1020c [0077.644] GetFocus () returned 0x1020c [0077.644] GetFocus () returned 0x1020c [0077.644] GetKeyState (nVirtKey=1) returned -128 [0077.644] GetKeyState (nVirtKey=2) returned 0 [0077.644] GetKeyState (nVirtKey=4) returned 0 [0077.644] GetKeyState (nVirtKey=5) returned 0 [0077.644] GetKeyState (nVirtKey=6) returned 0 [0077.644] GetCapture () returned 0x0 [0077.644] SetCapture (hWnd=0x1020c) returned 0x0 [0077.644] GetKeyState (nVirtKey=1) returned -128 [0077.644] GetKeyState (nVirtKey=2) returned 0 [0077.644] GetKeyState (nVirtKey=4) returned 0 [0077.644] GetKeyState (nVirtKey=5) returned 0 [0077.644] GetKeyState (nVirtKey=6) returned 0 [0077.644] NotifyWinEvent (event=0x800a, hwnd=0x1020c, idObject=-4, idChild=0) [0077.644] InvalidateRect (hWnd=0x1020c, lpRect=0x14e6f0, bErase=0) returned 1 [0077.644] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.644] GetMessageA (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.644] TranslateMessage (lpMsg=0x14edb0) returned 0 [0077.644] DispatchMessageA (lpMsg=0x14edb0) returned 0x0 [0077.644] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.644] IsWindowUnicode (hWnd=0x1020c) returned 1 [0077.645] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.645] TranslateMessage (lpMsg=0x14edb0) returned 0 [0077.645] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0077.645] MapWindowPoints (in: hWndFrom=0x1020c, hWndTo=0x0, lpPoints=0x21aaf90, cPoints=0x1 | out: lpPoints=0x21aaf90) returned 41353803 [0077.645] NotifyWinEvent (event=0x800a, hwnd=0x1020c, idObject=-4, idChild=0) [0077.645] InvalidateRect (hWnd=0x1020c, lpRect=0x14e680, bErase=0) returned 1 [0077.645] UpdateWindow (hWnd=0x1020c) returned 1 [0077.645] BeginPaint (in: hWnd=0x1020c, lpPaint=0x14ddf8 | out: lpPaint=0x14ddf8) returned 0x5010830 [0077.645] SelectPalette (hdc=0x5010830, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0077.645] CreateCompatibleDC (hdc=0x5010830) returned 0xffffffff8f010722 [0077.645] SelectObject (hdc=0xffffffff8f010722, h=0x29050250) returned 0x185000f [0077.645] GdipCreateFromHDC (hdc=0xffffffff8f010722, graphics=0x14dd78) returned 0x0 [0077.645] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0077.645] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=408, height=23, combineMode=0x0) returned 0x0 [0077.645] GdipCreateMatrix (matrix=0x14dda0) returned 0x0 [0077.645] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0077.645] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14de08) returned 0x0 [0077.645] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.645] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0077.645] LocalFree (hMem=0xa931f0) returned 0x0 [0077.645] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0077.646] GdipCreateRegion (region=0x14dda0) returned 0x0 [0077.646] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0077.646] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14de00) returned 0x0 [0077.646] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14dea0) returned 0x0 [0077.646] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd7e0dbd) returned 0x0 [0077.646] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0077.646] GdipGetDC (graphics=0x1afd81d0, hdc=0x14db18) returned 0x0 [0077.646] GetCurrentObject (hdc=0xffffffff8f010722, type=0x1) returned 0x1b00017 [0077.646] GetCurrentObject (hdc=0xffffffff8f010722, type=0x2) returned 0x1900010 [0077.646] GetCurrentObject (hdc=0xffffffff8f010722, type=0x7) returned 0x29050250 [0077.646] GetCurrentObject (hdc=0xffffffff8f010722, type=0x6) returned 0x18a002e [0077.646] SaveDC (hdc=0xffffffff8f010722) returned 1 [0077.646] GetNearestColor (hdc=0xffffffff8f010722, color=0xa0) returned 0xa0 [0077.646] GetNearestColor (hdc=0xffffffff8f010722, color=0x35) returned 0x35 [0077.646] GetNearestColor (hdc=0xffffffff8f010722, color=0x0) returned 0x0 [0077.646] GetNearestColor (hdc=0xffffffff8f010722, color=0x4848e5) returned 0x4848e5 [0077.646] GetNearestColor (hdc=0xffffffff8f010722, color=0x0) returned 0x0 [0077.646] GetNearestColor (hdc=0xffffffff8f010722, color=0x5151ff) returned 0x5151ff [0077.647] GetNearestColor (hdc=0xffffffff8f010722, color=0x4848e5) returned 0x4848e5 [0077.647] GetNearestColor (hdc=0xffffffff8f010722, color=0xc0) returned 0xc0 [0077.647] GetNearestColor (hdc=0xffffffff8f010722, color=0x0) returned 0x0 [0077.647] RestoreDC (hdc=0xffffffff8f010722, nSavedDC=-1) returned 1 [0077.647] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8f010722) returned 0x0 [0077.647] IsAppThemed () returned 0x1 [0077.647] GetThemeAppProperties () returned 0x3 [0077.647] GetThemeAppProperties () returned 0x3 [0077.647] IsAppThemed () returned 0x1 [0077.647] GetThemeAppProperties () returned 0x3 [0077.647] GetThemeAppProperties () returned 0x3 [0077.647] DrawTextExW (in: hdc=0x8010893, lpchText="Check", cchText=5, lprc=0x14d788, format=0x2415, lpdtp=0x21abab8 | out: lpchText="Check", lprc=0x14d788) returned 13 [0077.647] IsAppThemed () returned 0x1 [0077.647] GetThemeAppProperties () returned 0x3 [0077.647] GetThemeAppProperties () returned 0x3 [0077.647] IsAppThemed () returned 0x1 [0077.647] GetThemeAppProperties () returned 0x3 [0077.647] GetThemeAppProperties () returned 0x3 [0077.647] IsAppThemed () returned 0x1 [0077.647] GetThemeAppProperties () returned 0x3 [0077.647] GetThemeAppProperties () returned 0x3 [0077.647] IsAppThemed () returned 0x1 [0077.647] GetThemeAppProperties () returned 0x3 [0077.647] GetThemeAppProperties () returned 0x3 [0077.647] IsThemePartDefined () returned 0x1 [0077.648] IsAppThemed () returned 0x1 [0077.648] GetThemeAppProperties () returned 0x3 [0077.648] GetThemeAppProperties () returned 0x3 [0077.648] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0077.648] IsAppThemed () returned 0x1 [0077.648] GetThemeAppProperties () returned 0x3 [0077.648] GetThemeAppProperties () returned 0x3 [0077.648] IsAppThemed () returned 0x1 [0077.648] GetThemeAppProperties () returned 0x3 [0077.648] GetThemeAppProperties () returned 0x3 [0077.648] IsThemePartDefined () returned 0x1 [0077.648] GdipCreateRegion (region=0x14d880) returned 0x0 [0077.648] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0077.648] GdipCreateMatrix (matrix=0x14d880) returned 0x0 [0077.648] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0077.648] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14d8e8) returned 0x0 [0077.648] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.648] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0077.648] LocalFree (hMem=0xa931f0) returned 0x0 [0077.648] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.648] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0077.648] LocalFree (hMem=0xa931f0) returned 0x0 [0077.648] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0077.648] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d950) returned 0x0 [0077.648] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d910) returned 0x0 [0077.648] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14d910) returned 0x0 [0077.649] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0077.649] GdipGetDC (graphics=0x1afd81d0, hdc=0x14d958) returned 0x0 [0077.649] GetCurrentObject (hdc=0xffffffff8f010722, type=0x1) returned 0x1b00017 [0077.649] GetCurrentObject (hdc=0xffffffff8f010722, type=0x2) returned 0x1900010 [0077.649] GetCurrentObject (hdc=0xffffffff8f010722, type=0x7) returned 0x29050250 [0077.649] GetCurrentObject (hdc=0xffffffff8f010722, type=0x6) returned 0x18a002e [0077.649] SaveDC (hdc=0xffffffff8f010722) returned 1 [0077.649] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3b04086f [0077.649] GetClipRgn (hdc=0xffffffff8f010722, hrgn=0x3b04086f) returned 0 [0077.649] SelectClipRgn (hdc=0xffffffff8f010722, hrgn=0x5a040872) returned 2 [0077.649] DeleteObject (ho=0x3b04086f) returned 1 [0077.649] DeleteObject (ho=0x5a040872) returned 1 [0077.649] OffsetViewportOrgEx (in: hdc=0xffffffff8f010722, x=0, y=0, lppt=0x21ac4a0 | out: lppt=0x21ac4a0) returned 1 [0077.649] DrawThemeParentBackground () returned 0x0 [0077.649] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14d508 | out: lpwndpl=0x14d508) returned 1 [0077.649] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d420 | out: lpRect=0x14d420) returned 1 [0077.649] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0077.649] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0077.650] GetSystemMetrics (nIndex=42) returned 0 [0077.650] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d180, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0077.650] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d180) returned 0xc [0077.650] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d208 | out: lpRect=0x14d208) returned 1 [0077.650] GetCurrentObject (hdc=0xffffffff8f010722, type=0x1) returned 0x1b00017 [0077.650] GetCurrentObject (hdc=0xffffffff8f010722, type=0x2) returned 0x1900010 [0077.650] GetCurrentObject (hdc=0xffffffff8f010722, type=0x7) returned 0x29050250 [0077.650] GetCurrentObject (hdc=0xffffffff8f010722, type=0x6) returned 0x18a002e [0077.650] SaveDC (hdc=0xffffffff8f010722) returned 2 [0077.650] GetNearestColor (hdc=0xffffffff8f010722, color=0xa0) returned 0xa0 [0077.650] CreateSolidBrush (color=0xa0) returned 0x5b100860 [0077.650] FillRect (hDC=0xffffffff8f010722, lprc=0x14cef8, hbr=0x5b100860) returned 1 [0077.650] DeleteObject (ho=0x5b100860) returned 1 [0077.650] RestoreDC (hdc=0xffffffff8f010722, nSavedDC=-1) returned 1 [0077.650] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0077.650] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0077.650] GetSystemMetrics (nIndex=42) returned 0 [0077.650] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d0b0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0077.650] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d0b0) returned 0xc [0077.651] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d138 | out: lpRect=0x14d138) returned 1 [0077.651] GetCurrentObject (hdc=0xffffffff8f010722, type=0x1) returned 0x1b00017 [0077.651] GetCurrentObject (hdc=0xffffffff8f010722, type=0x2) returned 0x1900010 [0077.651] GetCurrentObject (hdc=0xffffffff8f010722, type=0x7) returned 0x29050250 [0077.651] GetCurrentObject (hdc=0xffffffff8f010722, type=0x6) returned 0x18a002e [0077.651] SaveDC (hdc=0xffffffff8f010722) returned 2 [0077.651] GetNearestColor (hdc=0xffffffff8f010722, color=0xa0) returned 0xa0 [0077.651] CreateSolidBrush (color=0xa0) returned 0x5c100860 [0077.651] FillRect (hDC=0xffffffff8f010722, lprc=0x14ce28, hbr=0x5c100860) returned 1 [0077.651] DeleteObject (ho=0x5c100860) returned 1 [0077.651] RestoreDC (hdc=0xffffffff8f010722, nSavedDC=-1) returned 1 [0077.651] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0077.651] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0077.651] GetSystemMetrics (nIndex=42) returned 0 [0077.651] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d0b0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0077.651] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d0b0) returned 0xc [0077.651] RestoreDC (hdc=0xffffffff8f010722, nSavedDC=-1) returned 1 [0077.651] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8f010722) returned 0x0 [0077.651] IsAppThemed () returned 0x1 [0077.651] GetThemeAppProperties () returned 0x3 [0077.652] GetThemeAppProperties () returned 0x3 [0077.652] IsAppThemed () returned 0x1 [0077.652] GetThemeAppProperties () returned 0x3 [0077.652] GetThemeAppProperties () returned 0x3 [0077.652] IsThemePartDefined () returned 0x1 [0077.652] GdipCreateRegion (region=0x14d820) returned 0x0 [0077.652] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0077.652] GdipCreateMatrix (matrix=0x14d820) returned 0x0 [0077.652] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0077.652] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14d888) returned 0x0 [0077.652] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.652] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0077.652] LocalFree (hMem=0xa931f0) returned 0x0 [0077.652] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.652] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0077.652] LocalFree (hMem=0xa931f0) returned 0x0 [0077.652] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0077.652] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d8f0) returned 0x0 [0077.652] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d8b0) returned 0x0 [0077.652] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14d8b0) returned 0x0 [0077.652] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0077.652] GdipGetDC (graphics=0x1afd81d0, hdc=0x14d8f8) returned 0x0 [0077.652] GetCurrentObject (hdc=0xffffffff8f010722, type=0x1) returned 0x1b00017 [0077.653] GetCurrentObject (hdc=0xffffffff8f010722, type=0x2) returned 0x1900010 [0077.653] GetCurrentObject (hdc=0xffffffff8f010722, type=0x7) returned 0x29050250 [0077.653] GetCurrentObject (hdc=0xffffffff8f010722, type=0x6) returned 0x18a002e [0077.653] SaveDC (hdc=0xffffffff8f010722) returned 1 [0077.653] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5b040872 [0077.653] GetClipRgn (hdc=0xffffffff8f010722, hrgn=0x5b040872) returned 0 [0077.653] SelectClipRgn (hdc=0xffffffff8f010722, hrgn=0x3d04086f) returned 2 [0077.653] DeleteObject (ho=0x5b040872) returned 1 [0077.653] DeleteObject (ho=0x3d04086f) returned 1 [0077.653] OffsetViewportOrgEx (in: hdc=0xffffffff8f010722, x=0, y=0, lppt=0x21ad2a8 | out: lppt=0x21ad2a8) returned 1 [0077.653] IsAppThemed () returned 0x1 [0077.653] GetThemeAppProperties () returned 0x3 [0077.653] GetThemeAppProperties () returned 0x3 [0077.653] DrawThemeBackground () returned 0x0 [0077.653] RestoreDC (hdc=0xffffffff8f010722, nSavedDC=-1) returned 1 [0077.653] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8f010722) returned 0x0 [0077.653] GdipCreateRegion (region=0x14d810) returned 0x0 [0077.653] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0077.653] GdipCreateMatrix (matrix=0x14d810) returned 0x0 [0077.653] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0077.653] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14d878) returned 0x0 [0077.654] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.654] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0077.654] LocalFree (hMem=0xa931f0) returned 0x0 [0077.654] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.654] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0077.654] LocalFree (hMem=0xa931f0) returned 0x0 [0077.654] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0077.654] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d8e0) returned 0x0 [0077.654] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d8a0) returned 0x0 [0077.654] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14d8a0) returned 0x0 [0077.654] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0077.654] GdipGetDC (graphics=0x1afd81d0, hdc=0x14d8e8) returned 0x0 [0077.654] GetCurrentObject (hdc=0xffffffff8f010722, type=0x1) returned 0x1b00017 [0077.654] GetCurrentObject (hdc=0xffffffff8f010722, type=0x2) returned 0x1900010 [0077.654] GetCurrentObject (hdc=0xffffffff8f010722, type=0x7) returned 0x29050250 [0077.654] GetCurrentObject (hdc=0xffffffff8f010722, type=0x6) returned 0x18a002e [0077.654] SaveDC (hdc=0xffffffff8f010722) returned 1 [0077.654] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x3e04086f [0077.654] GetClipRgn (hdc=0xffffffff8f010722, hrgn=0x3e04086f) returned 0 [0077.654] SelectClipRgn (hdc=0xffffffff8f010722, hrgn=0x5c040872) returned 2 [0077.654] DeleteObject (ho=0x3e04086f) returned 1 [0077.655] DeleteObject (ho=0x5c040872) returned 1 [0077.655] OffsetViewportOrgEx (in: hdc=0xffffffff8f010722, x=0, y=0, lppt=0x21ad780 | out: lppt=0x21ad780) returned 1 [0077.655] IsAppThemed () returned 0x1 [0077.655] GetThemeAppProperties () returned 0x3 [0077.655] GetThemeAppProperties () returned 0x3 [0077.655] GetThemeBackgroundContentRect () returned 0x0 [0077.655] RestoreDC (hdc=0xffffffff8f010722, nSavedDC=-1) returned 1 [0077.655] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8f010722) returned 0x0 [0077.655] IsAppThemed () returned 0x1 [0077.655] GetThemeAppProperties () returned 0x3 [0077.655] GetThemeAppProperties () returned 0x3 [0077.655] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14dac8) returned 0x0 [0077.655] GdipGetDC (graphics=0x1afd81d0, hdc=0x14daa8) returned 0x0 [0077.655] GetCurrentObject (hdc=0xffffffff8f010722, type=0x1) returned 0x1b00017 [0077.655] GetCurrentObject (hdc=0xffffffff8f010722, type=0x2) returned 0x1900010 [0077.655] GetCurrentObject (hdc=0xffffffff8f010722, type=0x7) returned 0x29050250 [0077.655] GetCurrentObject (hdc=0xffffffff8f010722, type=0x6) returned 0x18a002e [0077.655] SaveDC (hdc=0xffffffff8f010722) returned 1 [0077.655] GetTextAlign (hdc=0xffffffff8f010722) returned 0x0 [0077.655] GetTextColor (hdc=0xffffffff8f010722) returned 0x0 [0077.655] GetCurrentObject (hdc=0xffffffff8f010722, type=0x6) returned 0x18a002e [0077.655] GetObjectW (in: h=0x18a002e, c=92, pv=0x14d5e0 | out: pv=0x14d5e0) returned 92 [0077.656] SelectObject (hdc=0xffffffff8f010722, h=0x120a086d) returned 0x18a002e [0077.656] GetBkMode (hdc=0xffffffff8f010722) returned 2 [0077.656] SetBkMode (hdc=0xffffffff8f010722, mode=1) returned 2 [0077.656] DrawTextExW (in: hdc=0xffffffff8f010722, lpchText="Check", cchText=5, lprc=0x14d820, format=0x2415, lpdtp=0x21add60 | out: lpchText="Check", lprc=0x14d820) returned 13 [0077.656] DrawTextExW (in: hdc=0xffffffff8f010722, lpchText="Check", cchText=5, lprc=0x14da38, format=0x2015, lpdtp=0x21add60 | out: lpchText="Check", lprc=0x14da38) returned 13 [0077.656] RestoreDC (hdc=0xffffffff8f010722, nSavedDC=-1) returned 1 [0077.656] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8f010722) returned 0x0 [0077.656] GetFocus () returned 0x1020c [0077.657] IsAppThemed () returned 0x1 [0077.657] GetThemeAppProperties () returned 0x3 [0077.657] GetThemeAppProperties () returned 0x3 [0077.657] GdipGetDC (graphics=0x1afd81d0, hdc=0x14ddb8) returned 0x0 [0077.657] BitBlt (hdc=0x5010830, x=0, y=0, cx=408, cy=23, hdcSrc=0xffffffff8f010722, x1=0, y1=0, rop=0xcc0020) returned 1 [0077.657] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8f010722) returned 0x0 [0077.657] SelectPalette (hdc=0x5010830, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0077.657] SelectObject (hdc=0xffffffff8f010722, h=0x185000f) returned 0x29050250 [0077.657] DeleteDC (hdc=0xffffffff8f010722) returned 1 [0077.657] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0077.657] EndPaint (hWnd=0x1020c, lpPaint=0x14dd98) returned 1 [0077.657] MapWindowPoints (in: hWndFrom=0x1020c, hWndTo=0x0, lpPoints=0x21adec8, cPoints=0x1 | out: lpPoints=0x21adec8) returned 41353803 [0077.657] WindowFromPoint (Point=0x28200000317) returned 0x1020c [0077.657] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.657] NotifyWinEvent (event=0x800a, hwnd=0x1020c, idObject=-4, idChild=0) [0077.657] NotifyWinEvent (event=0x800c, hwnd=0x1020c, idObject=-4, idChild=0) [0077.657] SetWindowPos (hWnd=0x10214, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0077.657] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x46, wParam=0x0, lParam=0x14e450) returned 0x0 [0077.658] GetCapture () returned 0x1020c [0077.658] ReleaseCapture () returned 1 [0077.658] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0077.658] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.658] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.658] IsWindowUnicode (hWnd=0x1020c) returned 1 [0077.658] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.658] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.658] SetCursor (hCursor=0x10003) returned 0x10003 [0077.658] TranslateMessage (lpMsg=0x14edb0) returned 0 [0077.658] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0077.658] GetKeyState (nVirtKey=1) returned 0 [0077.658] GetKeyState (nVirtKey=2) returned 0 [0077.658] GetKeyState (nVirtKey=4) returned 0 [0077.658] GetKeyState (nVirtKey=5) returned 0 [0077.658] GetKeyState (nVirtKey=6) returned 0 [0077.658] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.658] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.658] WaitMessage () returned 1 [0077.759] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.759] IsWindowUnicode (hWnd=0x1020c) returned 1 [0077.759] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.760] GetKeyState (nVirtKey=16) returned 0 [0077.760] GetKeyState (nVirtKey=17) returned 0 [0077.760] GetKeyState (nVirtKey=18) returned 0 [0077.760] GetKeyState (nVirtKey=16) returned 0 [0077.760] GetKeyState (nVirtKey=17) returned 0 [0077.760] GetKeyState (nVirtKey=18) returned 0 [0077.760] SendMessageW (hWnd=0x1020c, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x2000 [0077.760] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x2000 [0077.760] SendMessageW (hWnd=0x1020c, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x2000 [0077.760] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x87, wParam=0x0, lParam=0x0) returned 0x2000 [0077.761] TranslateMessage (lpMsg=0x14edb0) returned 1 [0077.761] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0077.761] GetKeyState (nVirtKey=16) returned 0 [0077.761] GetKeyState (nVirtKey=17) returned 0 [0077.761] GetKeyState (nVirtKey=18) returned 0 [0077.761] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x100, wParam=0x5b, lParam=0x15b0001) returned 0x0 [0077.761] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.761] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.761] WaitMessage () returned 1 [0077.774] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.774] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.774] IsWindowUnicode (hWnd=0x1020c) returned 1 [0077.774] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.774] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.774] SetCursor (hCursor=0x10003) returned 0x10003 [0077.774] TranslateMessage (lpMsg=0x14edb0) returned 0 [0077.774] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0077.774] GetKeyState (nVirtKey=1) returned 0 [0077.774] GetKeyState (nVirtKey=2) returned 0 [0077.774] GetKeyState (nVirtKey=4) returned 0 [0077.774] GetKeyState (nVirtKey=5) returned 0 [0077.774] GetKeyState (nVirtKey=6) returned 0 [0077.775] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.775] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.775] WaitMessage () returned 1 [0077.777] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.777] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.777] IsWindowUnicode (hWnd=0x1020c) returned 1 [0077.777] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.777] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.778] SetCursor (hCursor=0x10003) returned 0x10003 [0077.778] TranslateMessage (lpMsg=0x14edb0) returned 0 [0077.778] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0077.778] GetKeyState (nVirtKey=1) returned 0 [0077.778] GetKeyState (nVirtKey=2) returned 0 [0077.778] GetKeyState (nVirtKey=4) returned 0 [0077.778] GetKeyState (nVirtKey=5) returned 0 [0077.778] GetKeyState (nVirtKey=6) returned 0 [0077.778] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.778] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.778] WaitMessage () returned 1 [0077.779] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.783] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.783] IsWindowUnicode (hWnd=0x1020c) returned 1 [0077.783] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.783] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.783] SetCursor (hCursor=0x10003) returned 0x10003 [0077.783] TranslateMessage (lpMsg=0x14edb0) returned 0 [0077.783] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0077.783] GetKeyState (nVirtKey=1) returned 0 [0077.783] GetKeyState (nVirtKey=2) returned 0 [0077.783] GetKeyState (nVirtKey=4) returned 0 [0077.783] GetKeyState (nVirtKey=5) returned 0 [0077.783] GetKeyState (nVirtKey=6) returned 0 [0077.783] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.783] IsWindowUnicode (hWnd=0x1020c) returned 1 [0077.783] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.783] GetKeyState (nVirtKey=16) returned 0 [0077.783] GetKeyState (nVirtKey=17) returned 0 [0077.784] GetKeyState (nVirtKey=18) returned 0 [0077.784] TranslateMessage (lpMsg=0x14edb0) returned 1 [0077.784] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0077.784] GetKeyState (nVirtKey=16) returned 0 [0077.784] GetKeyState (nVirtKey=17) returned 0 [0077.784] GetKeyState (nVirtKey=18) returned 0 [0077.784] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x101, wParam=0x44, lParam=0x80200001) returned 0x0 [0077.784] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.784] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.784] WaitMessage () returned 1 [0077.785] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.785] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.785] IsWindowUnicode (hWnd=0x1020c) returned 1 [0077.785] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.785] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.785] SetCursor (hCursor=0x10003) returned 0x10003 [0077.785] TranslateMessage (lpMsg=0x14edb0) returned 0 [0077.785] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0077.785] GetKeyState (nVirtKey=1) returned 0 [0077.785] GetKeyState (nVirtKey=2) returned 0 [0077.785] GetKeyState (nVirtKey=4) returned 0 [0077.785] GetKeyState (nVirtKey=5) returned 0 [0077.785] GetKeyState (nVirtKey=6) returned 0 [0077.785] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.785] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.785] WaitMessage () returned 1 [0077.789] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.789] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.789] IsWindowUnicode (hWnd=0x1020c) returned 1 [0077.789] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.789] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.789] SetCursor (hCursor=0x10003) returned 0x10003 [0077.789] TranslateMessage (lpMsg=0x14edb0) returned 0 [0077.789] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0077.789] GetKeyState (nVirtKey=1) returned 0 [0077.789] GetKeyState (nVirtKey=2) returned 0 [0077.789] GetKeyState (nVirtKey=4) returned 0 [0077.789] GetKeyState (nVirtKey=5) returned 0 [0077.789] GetKeyState (nVirtKey=6) returned 0 [0077.789] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.789] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.789] WaitMessage () returned 1 [0077.794] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.794] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.794] IsWindowUnicode (hWnd=0x1020c) returned 1 [0077.794] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.794] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.794] SetCursor (hCursor=0x10003) returned 0x10003 [0077.794] TranslateMessage (lpMsg=0x14edb0) returned 0 [0077.794] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0077.794] GetKeyState (nVirtKey=1) returned 0 [0077.794] GetKeyState (nVirtKey=2) returned 0 [0077.794] GetKeyState (nVirtKey=4) returned 0 [0077.794] GetKeyState (nVirtKey=5) returned 0 [0077.794] GetKeyState (nVirtKey=6) returned 0 [0077.794] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.794] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.794] WaitMessage () returned 1 [0077.795] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.799] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.799] IsWindowUnicode (hWnd=0x1020c) returned 1 [0077.799] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.799] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.800] SetCursor (hCursor=0x10003) returned 0x10003 [0077.800] TranslateMessage (lpMsg=0x14edb0) returned 0 [0077.800] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0077.800] GetKeyState (nVirtKey=1) returned 0 [0077.800] GetKeyState (nVirtKey=2) returned 0 [0077.800] GetKeyState (nVirtKey=4) returned 0 [0077.800] GetKeyState (nVirtKey=5) returned 0 [0077.800] GetKeyState (nVirtKey=6) returned 0 [0077.800] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.800] IsWindowUnicode (hWnd=0x1020c) returned 1 [0077.800] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.800] GetKeyState (nVirtKey=16) returned 0 [0077.800] GetKeyState (nVirtKey=17) returned 0 [0077.800] GetKeyState (nVirtKey=18) returned 0 [0077.800] TranslateMessage (lpMsg=0x14edb0) returned 1 [0077.800] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0077.800] GetKeyState (nVirtKey=16) returned 0 [0077.801] GetKeyState (nVirtKey=17) returned 0 [0077.801] GetKeyState (nVirtKey=18) returned 0 [0077.801] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x101, wParam=0x5b, lParam=0xc15b0001) returned 0x0 [0077.801] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.801] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.801] WaitMessage () returned 1 [0077.802] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.802] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.802] IsWindowUnicode (hWnd=0x1020c) returned 1 [0077.802] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.802] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.802] SetCursor (hCursor=0x10003) returned 0x10003 [0077.802] TranslateMessage (lpMsg=0x14edb0) returned 0 [0077.803] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0077.803] GetKeyState (nVirtKey=1) returned 0 [0077.803] GetKeyState (nVirtKey=2) returned 0 [0077.803] GetKeyState (nVirtKey=4) returned 0 [0077.803] GetKeyState (nVirtKey=5) returned 0 [0077.803] GetKeyState (nVirtKey=6) returned 0 [0077.803] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.803] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.803] WaitMessage () returned 1 [0077.804] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.804] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.805] IsWindowUnicode (hWnd=0x1020c) returned 1 [0077.806] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.806] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.807] SetCursor (hCursor=0x10003) returned 0x10003 [0077.807] TranslateMessage (lpMsg=0x14edb0) returned 0 [0077.807] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0077.807] GetKeyState (nVirtKey=1) returned 0 [0077.807] GetKeyState (nVirtKey=2) returned 0 [0077.807] GetKeyState (nVirtKey=4) returned 0 [0077.807] GetKeyState (nVirtKey=5) returned 0 [0077.807] GetKeyState (nVirtKey=6) returned 0 [0077.808] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.808] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.808] WaitMessage () returned 1 [0077.810] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.810] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.810] IsWindowUnicode (hWnd=0x1020c) returned 1 [0077.810] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.810] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.810] SetCursor (hCursor=0x10003) returned 0x10003 [0077.810] TranslateMessage (lpMsg=0x14edb0) returned 0 [0077.810] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0077.810] GetKeyState (nVirtKey=1) returned 0 [0077.810] GetKeyState (nVirtKey=2) returned 0 [0077.810] GetKeyState (nVirtKey=4) returned 0 [0077.811] GetKeyState (nVirtKey=5) returned 0 [0077.811] GetKeyState (nVirtKey=6) returned 0 [0077.811] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.811] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.811] WaitMessage () returned 1 [0077.812] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.812] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.812] IsWindowUnicode (hWnd=0x1020c) returned 1 [0077.812] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.812] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.812] SetCursor (hCursor=0x10003) returned 0x10003 [0077.812] TranslateMessage (lpMsg=0x14edb0) returned 0 [0077.812] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0077.812] GetKeyState (nVirtKey=1) returned 0 [0077.812] GetKeyState (nVirtKey=2) returned 0 [0077.812] GetKeyState (nVirtKey=4) returned 0 [0077.812] GetKeyState (nVirtKey=5) returned 0 [0077.812] GetKeyState (nVirtKey=6) returned 0 [0077.812] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.812] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.812] WaitMessage () returned 1 [0077.813] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.813] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.813] IsWindowUnicode (hWnd=0x1020c) returned 1 [0077.813] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.813] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.813] SetCursor (hCursor=0x10003) returned 0x10003 [0077.813] TranslateMessage (lpMsg=0x14edb0) returned 0 [0077.813] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0077.813] GetKeyState (nVirtKey=1) returned 0 [0077.813] GetKeyState (nVirtKey=2) returned 0 [0077.813] GetKeyState (nVirtKey=4) returned 0 [0077.813] GetKeyState (nVirtKey=5) returned 0 [0077.813] GetKeyState (nVirtKey=6) returned 0 [0077.813] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.813] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.813] WaitMessage () returned 1 [0077.814] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.814] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.814] IsWindowUnicode (hWnd=0x1020c) returned 1 [0077.814] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.814] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.814] SetCursor (hCursor=0x10003) returned 0x10003 [0077.814] TranslateMessage (lpMsg=0x14edb0) returned 0 [0077.814] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0077.814] GetKeyState (nVirtKey=1) returned 0 [0077.814] GetKeyState (nVirtKey=2) returned 0 [0077.814] GetKeyState (nVirtKey=4) returned 0 [0077.814] GetKeyState (nVirtKey=5) returned 0 [0077.814] GetKeyState (nVirtKey=6) returned 0 [0077.815] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.815] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0077.815] WaitMessage () returned 1 [0077.827] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.827] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x88, wParam=0x4, lParam=0x0) returned 0x0 [0077.827] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0077.827] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0077.827] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0077.828] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0077.828] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14def8 | out: lpwndpl=0x14def8) returned 1 [0077.828] GetClientRect (in: hWnd=0x401fa, lpRect=0x14de10 | out: lpRect=0x14de10) returned 1 [0077.828] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0077.829] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0077.829] GetSystemMetrics (nIndex=42) returned 0 [0077.829] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14db70, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0077.829] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14db70) returned 0xc [0077.829] GetClientRect (in: hWnd=0x401fa, lpRect=0x14dbf8 | out: lpRect=0x14dbf8) returned 1 [0077.829] GetCurrentObject (hdc=0xb010256, type=0x1) returned 0x1b00017 [0077.829] GetCurrentObject (hdc=0xb010256, type=0x2) returned 0x1900010 [0077.829] GetCurrentObject (hdc=0xb010256, type=0x7) returned 0x1050032 [0077.829] GetCurrentObject (hdc=0xb010256, type=0x6) returned 0x18a002e [0077.829] SaveDC (hdc=0xb010256) returned 1 [0077.829] GetNearestColor (hdc=0xb010256, color=0xa0) returned 0xa0 [0077.829] CreateSolidBrush (color=0xa0) returned 0x5d100860 [0077.829] FillRect (hDC=0xb010256, lprc=0x14d8e8, hbr=0x5d100860) returned 1 [0077.829] DeleteObject (ho=0x5d100860) returned 1 [0077.829] RestoreDC (hdc=0xb010256, nSavedDC=-1) returned 1 [0077.830] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301fc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0077.830] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301fc, Msg=0x14, wParam=0x5010830, lParam=0x0) returned 0x1 [0077.830] GetStockObject (i=5) returned 0x1900015 [0077.830] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0077.830] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201dc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0077.831] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10206, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0077.831] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10208, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0077.831] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0077.831] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x138, wParam=0x5010830, lParam=0x1020a) returned 0x1100059 [0077.839] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14d598 | out: lpwndpl=0x14d598) returned 1 [0077.839] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d4b0 | out: lpRect=0x14d4b0) returned 1 [0077.839] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0077.839] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0077.839] GetSystemMetrics (nIndex=42) returned 0 [0077.839] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d210, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0077.839] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d210) returned 0xc [0077.840] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d298 | out: lpRect=0x14d298) returned 1 [0077.840] GetCurrentObject (hdc=0x4b01024b, type=0x1) returned 0x1b00017 [0077.840] GetCurrentObject (hdc=0x4b01024b, type=0x2) returned 0x1900010 [0077.840] GetCurrentObject (hdc=0x4b01024b, type=0x7) returned 0x6205007f [0077.840] GetCurrentObject (hdc=0x4b01024b, type=0x6) returned 0x18a002e [0077.840] SaveDC (hdc=0x4b01024b) returned 1 [0077.840] GetNearestColor (hdc=0x4b01024b, color=0xa0) returned 0xa0 [0077.840] CreateSolidBrush (color=0xa0) returned 0x5e100860 [0077.840] FillRect (hDC=0x4b01024b, lprc=0x14cf88, hbr=0x5e100860) returned 1 [0077.840] DeleteObject (ho=0x5e100860) returned 1 [0077.840] RestoreDC (hdc=0x4b01024b, nSavedDC=-1) returned 1 [0077.840] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0077.840] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0077.840] GetSystemMetrics (nIndex=42) returned 0 [0077.840] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d140, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0077.840] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d140) returned 0xc [0077.840] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d1c8 | out: lpRect=0x14d1c8) returned 1 [0077.840] GetCurrentObject (hdc=0x4b01024b, type=0x1) returned 0x1b00017 [0077.840] GetCurrentObject (hdc=0x4b01024b, type=0x2) returned 0x1900010 [0077.841] GetCurrentObject (hdc=0x4b01024b, type=0x7) returned 0x6205007f [0077.841] GetCurrentObject (hdc=0x4b01024b, type=0x6) returned 0x18a002e [0077.841] SaveDC (hdc=0x4b01024b) returned 1 [0077.841] GetNearestColor (hdc=0x4b01024b, color=0xa0) returned 0xa0 [0077.841] CreateSolidBrush (color=0xa0) returned 0x5f100860 [0077.841] FillRect (hDC=0x4b01024b, lprc=0x14ceb8, hbr=0x5f100860) returned 1 [0077.841] DeleteObject (ho=0x5f100860) returned 1 [0077.841] RestoreDC (hdc=0x4b01024b, nSavedDC=-1) returned 1 [0077.841] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0077.841] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0077.841] GetSystemMetrics (nIndex=42) returned 0 [0077.841] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d140, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0077.841] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d140) returned 0xc [0077.842] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020a, Msg=0x14, wParam=0x5010830, lParam=0x0) returned 0x1 [0077.842] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0077.842] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x14, wParam=0x5010825, lParam=0x0) returned 0x1 [0077.842] GetStockObject (i=5) returned 0x1900015 [0077.842] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0077.842] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x138, wParam=0x5010830, lParam=0x1020e) returned 0x1100059 [0077.842] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14d598 | out: lpwndpl=0x14d598) returned 1 [0077.843] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d4b0 | out: lpRect=0x14d4b0) returned 1 [0077.843] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0077.843] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0077.843] GetSystemMetrics (nIndex=42) returned 0 [0077.843] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d210, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0077.843] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d210) returned 0xc [0077.843] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d298 | out: lpRect=0x14d298) returned 1 [0077.843] GetCurrentObject (hdc=0x4c01024b, type=0x1) returned 0x1b00017 [0077.843] GetCurrentObject (hdc=0x4c01024b, type=0x2) returned 0x1900010 [0077.843] GetCurrentObject (hdc=0x4c01024b, type=0x7) returned 0x6205007f [0077.843] GetCurrentObject (hdc=0x4c01024b, type=0x6) returned 0x18a002e [0077.843] SaveDC (hdc=0x4c01024b) returned 1 [0077.843] GetNearestColor (hdc=0x4c01024b, color=0xa0) returned 0xa0 [0077.843] CreateSolidBrush (color=0xa0) returned 0x60100860 [0077.843] FillRect (hDC=0x4c01024b, lprc=0x14cf88, hbr=0x60100860) returned 1 [0077.843] DeleteObject (ho=0x60100860) returned 1 [0077.843] RestoreDC (hdc=0x4c01024b, nSavedDC=-1) returned 1 [0077.844] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0077.844] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0077.844] GetSystemMetrics (nIndex=42) returned 0 [0077.844] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d140, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0077.844] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d140) returned 0xc [0077.844] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d1c8 | out: lpRect=0x14d1c8) returned 1 [0077.844] GetCurrentObject (hdc=0x4c01024b, type=0x1) returned 0x1b00017 [0077.844] GetCurrentObject (hdc=0x4c01024b, type=0x2) returned 0x1900010 [0077.844] GetCurrentObject (hdc=0x4c01024b, type=0x7) returned 0x6205007f [0077.844] GetCurrentObject (hdc=0x4c01024b, type=0x6) returned 0x18a002e [0077.844] SaveDC (hdc=0x4c01024b) returned 1 [0077.844] GetNearestColor (hdc=0x4c01024b, color=0xa0) returned 0xa0 [0077.844] CreateSolidBrush (color=0xa0) returned 0x61100860 [0077.844] FillRect (hDC=0x4c01024b, lprc=0x14ceb8, hbr=0x61100860) returned 1 [0077.844] DeleteObject (ho=0x61100860) returned 1 [0077.844] RestoreDC (hdc=0x4c01024b, nSavedDC=-1) returned 1 [0077.844] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0077.845] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0077.845] GetSystemMetrics (nIndex=42) returned 0 [0077.845] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d140, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0077.845] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d140) returned 0xc [0077.845] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020e, Msg=0x14, wParam=0x5010830, lParam=0x0) returned 0x1 [0077.845] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x138, wParam=0x5010830, lParam=0x1020e) returned 0x1100059 [0077.846] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10210, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0077.846] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x88, wParam=0x4, lParam=0x0) returned 0x0 [0077.846] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0077.846] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0077.846] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0077.847] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0077.847] GetWindowPlacement (in: hWnd=0x10214, lpwndpl=0x14def8 | out: lpwndpl=0x14def8) returned 1 [0077.847] GetClientRect (in: hWnd=0x10214, lpRect=0x14de10 | out: lpRect=0x14de10) returned 1 [0077.847] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0077.847] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0077.847] GetSystemMetrics (nIndex=42) returned 0 [0077.847] GetWindowTextW (in: hWnd=0x10214, lpString=0x14db70, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0077.847] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14db70) returned 0xa [0077.847] GetClientRect (in: hWnd=0x10214, lpRect=0x14dbf8 | out: lpRect=0x14dbf8) returned 1 [0077.847] GetCurrentObject (hdc=0x5010825, type=0x1) returned 0x1b00017 [0077.847] GetCurrentObject (hdc=0x5010825, type=0x2) returned 0x1900010 [0077.848] GetCurrentObject (hdc=0x5010825, type=0x7) returned 0x1050032 [0077.848] GetCurrentObject (hdc=0x5010825, type=0x6) returned 0x18a002e [0077.848] SaveDC (hdc=0x5010825) returned 1 [0077.848] GetNearestColor (hdc=0x5010825, color=0xa0) returned 0xa0 [0077.848] CreateSolidBrush (color=0xa0) returned 0x62100860 [0077.848] FillRect (hDC=0x5010825, lprc=0x14d8e8, hbr=0x62100860) returned 1 [0077.848] DeleteObject (ho=0x62100860) returned 1 [0077.848] RestoreDC (hdc=0x5010825, nSavedDC=-1) returned 1 [0077.848] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x10216, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0077.848] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x10216, Msg=0x14, wParam=0xb010256, lParam=0x0) returned 0x1 [0077.848] GetStockObject (i=5) returned 0x1900015 [0077.849] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x10218, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0077.849] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x10218, Msg=0x14, wParam=0x5010830, lParam=0x0) returned 0x1 [0077.849] GetStockObject (i=5) returned 0x1900015 [0077.849] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0077.849] SetTextColor (hdc=0xb010256, color=0x0) returned 0x0 [0077.849] SetBkColor (hdc=0xb010256, color=0xffffff) returned 0xffffff [0077.849] GetWindowPlacement (in: hWnd=0x10214, lpwndpl=0x14d598 | out: lpwndpl=0x14d598) returned 1 [0077.849] GetClientRect (in: hWnd=0x10214, lpRect=0x14d4b0 | out: lpRect=0x14d4b0) returned 1 [0077.850] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0077.850] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0077.850] GetSystemMetrics (nIndex=42) returned 0 [0077.850] GetWindowTextW (in: hWnd=0x10214, lpString=0x14d210, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0077.850] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14d210) returned 0xa [0077.850] GetClientRect (in: hWnd=0x10214, lpRect=0x14d298 | out: lpRect=0x14d298) returned 1 [0077.850] GetCurrentObject (hdc=0x290108a5, type=0x1) returned 0x1b00017 [0077.850] GetCurrentObject (hdc=0x290108a5, type=0x2) returned 0x1900010 [0077.850] GetCurrentObject (hdc=0x290108a5, type=0x7) returned 0xfffffffffa05025c [0077.850] GetCurrentObject (hdc=0x290108a5, type=0x6) returned 0x18a002e [0077.850] SaveDC (hdc=0x290108a5) returned 1 [0077.850] GetNearestColor (hdc=0x290108a5, color=0xa0) returned 0xa0 [0077.850] CreateSolidBrush (color=0xa0) returned 0x63100860 [0077.850] FillRect (hDC=0x290108a5, lprc=0x14cf88, hbr=0x63100860) returned 1 [0077.850] DeleteObject (ho=0x63100860) returned 1 [0077.850] RestoreDC (hdc=0x290108a5, nSavedDC=-1) returned 1 [0077.850] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0077.850] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0077.851] GetSystemMetrics (nIndex=42) returned 0 [0077.851] GetWindowTextW (in: hWnd=0x10214, lpString=0x14d140, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0077.851] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14d140) returned 0xa [0077.851] GetClientRect (in: hWnd=0x10214, lpRect=0x14d1c8 | out: lpRect=0x14d1c8) returned 1 [0077.851] GetCurrentObject (hdc=0x290108a5, type=0x1) returned 0x1b00017 [0077.851] GetCurrentObject (hdc=0x290108a5, type=0x2) returned 0x1900010 [0077.851] GetCurrentObject (hdc=0x290108a5, type=0x7) returned 0xfffffffffa05025c [0077.851] GetCurrentObject (hdc=0x290108a5, type=0x6) returned 0x18a002e [0077.851] SaveDC (hdc=0x290108a5) returned 1 [0077.851] GetNearestColor (hdc=0x290108a5, color=0xa0) returned 0xa0 [0077.851] CreateSolidBrush (color=0xa0) returned 0x64100860 [0077.851] FillRect (hDC=0x290108a5, lprc=0x14ceb8, hbr=0x64100860) returned 1 [0077.851] DeleteObject (ho=0x64100860) returned 1 [0077.851] RestoreDC (hdc=0x290108a5, nSavedDC=-1) returned 1 [0077.851] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0077.851] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0077.851] GetSystemMetrics (nIndex=42) returned 0 [0077.851] GetWindowTextW (in: hWnd=0x10214, lpString=0x14d140, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0077.851] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14d140) returned 0xa [0077.852] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021a, Msg=0x14, wParam=0xb010256, lParam=0x0) returned 0x1 [0077.852] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x1021c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0077.852] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0077.852] SetTextColor (hdc=0xb010256, color=0x0) returned 0x0 [0077.852] SetBkColor (hdc=0xb010256, color=0xffffff) returned 0xffffff [0077.853] GetWindowPlacement (in: hWnd=0x10214, lpwndpl=0x14d598 | out: lpwndpl=0x14d598) returned 1 [0077.853] GetClientRect (in: hWnd=0x10214, lpRect=0x14d4b0 | out: lpRect=0x14d4b0) returned 1 [0077.853] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0077.853] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0077.853] GetSystemMetrics (nIndex=42) returned 0 [0077.853] GetWindowTextW (in: hWnd=0x10214, lpString=0x14d210, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0077.853] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14d210) returned 0xa [0077.853] GetClientRect (in: hWnd=0x10214, lpRect=0x14d298 | out: lpRect=0x14d298) returned 1 [0077.853] GetCurrentObject (hdc=0x2a0108a5, type=0x1) returned 0x1b00017 [0077.853] GetCurrentObject (hdc=0x2a0108a5, type=0x2) returned 0x1900010 [0077.853] GetCurrentObject (hdc=0x2a0108a5, type=0x7) returned 0xfffffffffa05025c [0077.853] GetCurrentObject (hdc=0x2a0108a5, type=0x6) returned 0x18a002e [0077.853] SaveDC (hdc=0x2a0108a5) returned 1 [0077.853] GetNearestColor (hdc=0x2a0108a5, color=0xa0) returned 0xa0 [0077.853] CreateSolidBrush (color=0xa0) returned 0x65100860 [0077.853] FillRect (hDC=0x2a0108a5, lprc=0x14cf88, hbr=0x65100860) returned 1 [0077.853] DeleteObject (ho=0x65100860) returned 1 [0077.853] RestoreDC (hdc=0x2a0108a5, nSavedDC=-1) returned 1 [0077.854] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0077.854] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0077.854] GetSystemMetrics (nIndex=42) returned 0 [0077.854] GetWindowTextW (in: hWnd=0x10214, lpString=0x14d140, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0077.854] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14d140) returned 0xa [0077.854] GetClientRect (in: hWnd=0x10214, lpRect=0x14d1c8 | out: lpRect=0x14d1c8) returned 1 [0077.854] GetCurrentObject (hdc=0x2a0108a5, type=0x1) returned 0x1b00017 [0077.854] GetCurrentObject (hdc=0x2a0108a5, type=0x2) returned 0x1900010 [0077.854] GetCurrentObject (hdc=0x2a0108a5, type=0x7) returned 0xfffffffffa05025c [0077.854] GetCurrentObject (hdc=0x2a0108a5, type=0x6) returned 0x18a002e [0077.854] SaveDC (hdc=0x2a0108a5) returned 1 [0077.854] GetNearestColor (hdc=0x2a0108a5, color=0xa0) returned 0xa0 [0077.854] CreateSolidBrush (color=0xa0) returned 0x66100860 [0077.854] FillRect (hDC=0x2a0108a5, lprc=0x14ceb8, hbr=0x66100860) returned 1 [0077.854] DeleteObject (ho=0x66100860) returned 1 [0077.854] RestoreDC (hdc=0x2a0108a5, nSavedDC=-1) returned 1 [0077.854] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0077.854] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0077.854] GetSystemMetrics (nIndex=42) returned 0 [0077.855] GetWindowTextW (in: hWnd=0x10214, lpString=0x14d140, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0077.855] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14d140) returned 0xa [0077.855] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0x14, wParam=0xb010256, lParam=0x0) returned 0x1 [0077.855] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10220, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0077.856] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0077.856] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0077.856] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0077.856] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0077.857] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x1c, wParam=0x0, lParam=0x460) returned 0x0 [0077.857] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x1c, wParam=0x0, lParam=0x460) returned 0x0 [0077.857] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301a2, Msg=0x1c, wParam=0x0, lParam=0x460) returned 0x0 [0077.857] NtdllDefWindowProc_W (hWnd=0x40120, Msg=0x1c, wParam=0x0, lParam=0x460) returned 0x0 [0077.857] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x1c, wParam=0x0, lParam=0x460) returned 0x0 [0077.857] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0077.857] GetCapture () returned 0x0 [0077.857] InvalidateRect (hWnd=0x1020c, lpRect=0x0, bErase=0) returned 1 [0077.857] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0077.857] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0077.857] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0077.857] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.857] IsWindowUnicode (hWnd=0x1020c) returned 1 [0077.857] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.858] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0077.858] SetCursor (hCursor=0x10003) returned 0x10003 [0077.858] TranslateMessage (lpMsg=0x14edb0) returned 0 [0077.858] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0077.858] GetKeyState (nVirtKey=1) returned 0 [0077.858] GetKeyState (nVirtKey=2) returned 0 [0077.858] GetKeyState (nVirtKey=4) returned 0 [0077.858] GetKeyState (nVirtKey=5) returned 0 [0077.858] GetKeyState (nVirtKey=6) returned 0 [0077.858] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.858] IsWindowUnicode (hWnd=0x401fa) returned 1 [0077.858] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.858] TranslateMessage (lpMsg=0x14edb0) returned 0 [0077.858] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0077.858] BeginPaint (in: hWnd=0x401fa, lpPaint=0x14e4e8 | out: lpPaint=0x14e4e8) returned 0x5010830 [0077.858] SelectPalette (hdc=0x5010830, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0077.858] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0077.858] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0077.858] GetSystemMetrics (nIndex=42) returned 0 [0077.858] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14e380, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0077.859] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14e380) returned 0xc [0077.859] SelectPalette (hdc=0x5010830, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0077.859] EndPaint (hWnd=0x401fa, lpPaint=0x14e488) returned 1 [0077.859] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.859] IsWindowUnicode (hWnd=0x301fc) returned 1 [0077.859] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.859] TranslateMessage (lpMsg=0x14edb0) returned 0 [0077.859] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0077.859] BeginPaint (in: hWnd=0x301fc, lpPaint=0x14e478 | out: lpPaint=0x14e478) returned 0xb010256 [0077.859] SelectPalette (hdc=0xb010256, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0077.859] CreateCompatibleDC (hdc=0xb010256) returned 0xfffffffff9010722 [0077.859] SelectObject (hdc=0xfffffffff9010722, h=0x29050250) returned 0x185000f [0077.859] GdipCreateFromHDC (hdc=0xfffffffff9010722, graphics=0x14e3f8) returned 0x0 [0077.859] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0077.859] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=123, height=23, combineMode=0x0) returned 0x0 [0077.860] GdipCreateMatrix (matrix=0x14e420) returned 0x0 [0077.860] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0077.860] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14e488) returned 0x0 [0077.860] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.860] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0077.860] LocalFree (hMem=0xa931f0) returned 0x0 [0077.860] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0077.860] GdipCreateRegion (region=0x14e420) returned 0x0 [0077.860] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0077.860] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e480) returned 0x0 [0077.860] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e520) returned 0x0 [0077.860] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd7c0dbd) returned 0x0 [0077.860] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0077.860] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e198) returned 0x0 [0077.860] GetCurrentObject (hdc=0xfffffffff9010722, type=0x1) returned 0x1b00017 [0077.860] GetCurrentObject (hdc=0xfffffffff9010722, type=0x2) returned 0x1900010 [0077.860] GetCurrentObject (hdc=0xfffffffff9010722, type=0x7) returned 0x29050250 [0077.860] GetCurrentObject (hdc=0xfffffffff9010722, type=0x6) returned 0x18a002e [0077.860] SaveDC (hdc=0xfffffffff9010722) returned 1 [0077.860] GetNearestColor (hdc=0xfffffffff9010722, color=0xa0) returned 0xa0 [0077.861] GetNearestColor (hdc=0xfffffffff9010722, color=0x35) returned 0x35 [0077.861] GetNearestColor (hdc=0xfffffffff9010722, color=0x0) returned 0x0 [0077.861] GetNearestColor (hdc=0xfffffffff9010722, color=0x4848e5) returned 0x4848e5 [0077.861] GetNearestColor (hdc=0xfffffffff9010722, color=0x0) returned 0x0 [0077.861] GetNearestColor (hdc=0xfffffffff9010722, color=0x5151ff) returned 0x5151ff [0077.861] GetNearestColor (hdc=0xfffffffff9010722, color=0x4848e5) returned 0x4848e5 [0077.861] GetNearestColor (hdc=0xfffffffff9010722, color=0xc0) returned 0xc0 [0077.861] GetNearestColor (hdc=0xfffffffff9010722, color=0x0) returned 0x0 [0077.861] RestoreDC (hdc=0xfffffffff9010722, nSavedDC=-1) returned 1 [0077.861] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xfffffffff9010722) returned 0x0 [0077.861] IsAppThemed () returned 0x1 [0077.861] GetThemeAppProperties () returned 0x3 [0077.861] GetThemeAppProperties () returned 0x3 [0077.861] IsAppThemed () returned 0x1 [0077.861] GetThemeAppProperties () returned 0x3 [0077.861] GetThemeAppProperties () returned 0x3 [0077.861] DrawTextExW (in: hdc=0x8010893, lpchText="Enter Code", cchText=10, lprc=0x14de08, format=0x2415, lpdtp=0x21b1d50 | out: lpchText="Enter Code", lprc=0x14de08) returned 13 [0077.861] IsAppThemed () returned 0x1 [0077.861] GetThemeAppProperties () returned 0x3 [0077.861] GetThemeAppProperties () returned 0x3 [0077.862] IsAppThemed () returned 0x1 [0077.862] GetThemeAppProperties () returned 0x3 [0077.862] GetThemeAppProperties () returned 0x3 [0077.862] GetFocus () returned 0x0 [0077.862] IsAppThemed () returned 0x1 [0077.862] GetThemeAppProperties () returned 0x3 [0077.862] GetThemeAppProperties () returned 0x3 [0077.862] IsAppThemed () returned 0x1 [0077.862] GetThemeAppProperties () returned 0x3 [0077.862] GetThemeAppProperties () returned 0x3 [0077.862] IsThemePartDefined () returned 0x1 [0077.862] IsAppThemed () returned 0x1 [0077.862] GetThemeAppProperties () returned 0x3 [0077.862] GetThemeAppProperties () returned 0x3 [0077.862] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0077.862] IsAppThemed () returned 0x1 [0077.862] GetThemeAppProperties () returned 0x3 [0077.862] GetThemeAppProperties () returned 0x3 [0077.862] IsAppThemed () returned 0x1 [0077.862] GetThemeAppProperties () returned 0x3 [0077.862] GetThemeAppProperties () returned 0x3 [0077.862] IsThemePartDefined () returned 0x1 [0077.862] GdipCreateRegion (region=0x14df00) returned 0x0 [0077.862] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0077.862] GdipCreateMatrix (matrix=0x14df00) returned 0x0 [0077.862] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0077.862] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14df68) returned 0x0 [0077.862] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.862] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0077.863] LocalFree (hMem=0xa931f0) returned 0x0 [0077.863] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.863] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0077.863] LocalFree (hMem=0xa931f0) returned 0x0 [0077.863] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0077.863] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14dfd0) returned 0x0 [0077.863] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df90) returned 0x0 [0077.863] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df90) returned 0x0 [0077.863] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0077.863] GdipGetDC (graphics=0x1afd81d0, hdc=0x14dfd8) returned 0x0 [0077.863] GetCurrentObject (hdc=0xfffffffff9010722, type=0x1) returned 0x1b00017 [0077.863] GetCurrentObject (hdc=0xfffffffff9010722, type=0x2) returned 0x1900010 [0077.863] GetCurrentObject (hdc=0xfffffffff9010722, type=0x7) returned 0x29050250 [0077.863] GetCurrentObject (hdc=0xfffffffff9010722, type=0x6) returned 0x18a002e [0077.863] SaveDC (hdc=0xfffffffff9010722) returned 1 [0077.863] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x61040872 [0077.863] GetClipRgn (hdc=0xfffffffff9010722, hrgn=0x61040872) returned 0 [0077.864] SelectClipRgn (hdc=0xfffffffff9010722, hrgn=0x5004086f) returned 2 [0077.864] DeleteObject (ho=0x61040872) returned 1 [0077.864] DeleteObject (ho=0x5004086f) returned 1 [0077.864] OffsetViewportOrgEx (in: hdc=0xfffffffff9010722, x=0, y=0, lppt=0x21b2738 | out: lppt=0x21b2738) returned 1 [0077.864] DrawThemeParentBackground () returned 0x0 [0077.864] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14db88 | out: lpwndpl=0x14db88) returned 1 [0077.864] GetClientRect (in: hWnd=0x401fa, lpRect=0x14daa0 | out: lpRect=0x14daa0) returned 1 [0077.864] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0077.864] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0077.864] GetSystemMetrics (nIndex=42) returned 0 [0077.864] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d800, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0077.864] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d800) returned 0xc [0077.864] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d888 | out: lpRect=0x14d888) returned 1 [0077.864] GetCurrentObject (hdc=0xfffffffff9010722, type=0x1) returned 0x1b00017 [0077.864] GetCurrentObject (hdc=0xfffffffff9010722, type=0x2) returned 0x1900010 [0077.864] GetCurrentObject (hdc=0xfffffffff9010722, type=0x7) returned 0x29050250 [0077.864] GetCurrentObject (hdc=0xfffffffff9010722, type=0x6) returned 0x18a002e [0077.864] SaveDC (hdc=0xfffffffff9010722) returned 2 [0077.864] GetNearestColor (hdc=0xfffffffff9010722, color=0xa0) returned 0xa0 [0077.864] CreateSolidBrush (color=0xa0) returned 0x67100860 [0077.865] FillRect (hDC=0xfffffffff9010722, lprc=0x14d578, hbr=0x67100860) returned 1 [0077.865] DeleteObject (ho=0x67100860) returned 1 [0077.865] RestoreDC (hdc=0xfffffffff9010722, nSavedDC=-1) returned 1 [0077.865] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0077.865] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0077.865] GetSystemMetrics (nIndex=42) returned 0 [0077.865] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0077.865] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0077.865] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d7b8 | out: lpRect=0x14d7b8) returned 1 [0077.865] GetCurrentObject (hdc=0xfffffffff9010722, type=0x1) returned 0x1b00017 [0077.865] GetCurrentObject (hdc=0xfffffffff9010722, type=0x2) returned 0x1900010 [0077.865] GetCurrentObject (hdc=0xfffffffff9010722, type=0x7) returned 0x29050250 [0077.865] GetCurrentObject (hdc=0xfffffffff9010722, type=0x6) returned 0x18a002e [0077.865] SaveDC (hdc=0xfffffffff9010722) returned 2 [0077.865] GetNearestColor (hdc=0xfffffffff9010722, color=0xa0) returned 0xa0 [0077.865] CreateSolidBrush (color=0xa0) returned 0x68100860 [0077.865] FillRect (hDC=0xfffffffff9010722, lprc=0x14d4a8, hbr=0x68100860) returned 1 [0077.866] DeleteObject (ho=0x68100860) returned 1 [0077.866] RestoreDC (hdc=0xfffffffff9010722, nSavedDC=-1) returned 1 [0077.866] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0077.866] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0077.866] GetSystemMetrics (nIndex=42) returned 0 [0077.866] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0077.866] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0077.866] RestoreDC (hdc=0xfffffffff9010722, nSavedDC=-1) returned 1 [0077.866] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xfffffffff9010722) returned 0x0 [0077.866] IsAppThemed () returned 0x1 [0077.866] GetThemeAppProperties () returned 0x3 [0077.866] GetThemeAppProperties () returned 0x3 [0077.866] IsAppThemed () returned 0x1 [0077.866] GetThemeAppProperties () returned 0x3 [0077.866] GetThemeAppProperties () returned 0x3 [0077.866] IsThemePartDefined () returned 0x1 [0077.866] GdipCreateRegion (region=0x14dea0) returned 0x0 [0077.866] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0077.866] GdipCreateMatrix (matrix=0x14dea0) returned 0x0 [0077.866] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0077.866] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14df08) returned 0x0 [0077.867] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.867] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0077.867] LocalFree (hMem=0xa931f0) returned 0x0 [0077.867] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.867] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0077.867] LocalFree (hMem=0xa931f0) returned 0x0 [0077.867] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0077.867] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df70) returned 0x0 [0077.867] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df30) returned 0x0 [0077.867] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df30) returned 0x0 [0077.867] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0077.867] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df78) returned 0x0 [0077.867] GetCurrentObject (hdc=0xfffffffff9010722, type=0x1) returned 0x1b00017 [0077.867] GetCurrentObject (hdc=0xfffffffff9010722, type=0x2) returned 0x1900010 [0077.867] GetCurrentObject (hdc=0xfffffffff9010722, type=0x7) returned 0x29050250 [0077.867] GetCurrentObject (hdc=0xfffffffff9010722, type=0x6) returned 0x18a002e [0077.867] SaveDC (hdc=0xfffffffff9010722) returned 1 [0077.867] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5104086f [0077.868] GetClipRgn (hdc=0xfffffffff9010722, hrgn=0x5104086f) returned 0 [0077.868] SelectClipRgn (hdc=0xfffffffff9010722, hrgn=0x63040872) returned 2 [0077.868] DeleteObject (ho=0x5104086f) returned 1 [0077.868] DeleteObject (ho=0x63040872) returned 1 [0077.868] OffsetViewportOrgEx (in: hdc=0xfffffffff9010722, x=0, y=0, lppt=0x21b3540 | out: lppt=0x21b3540) returned 1 [0077.868] IsAppThemed () returned 0x1 [0077.868] GetThemeAppProperties () returned 0x3 [0077.868] GetThemeAppProperties () returned 0x3 [0077.868] DrawThemeBackground () returned 0x0 [0077.868] RestoreDC (hdc=0xfffffffff9010722, nSavedDC=-1) returned 1 [0077.868] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xfffffffff9010722) returned 0x0 [0077.868] GdipCreateRegion (region=0x14de90) returned 0x0 [0077.868] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0077.868] GdipCreateMatrix (matrix=0x14de90) returned 0x0 [0077.868] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0077.868] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14def8) returned 0x0 [0077.868] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.868] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0077.868] LocalFree (hMem=0xa931f0) returned 0x0 [0077.868] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.868] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0077.869] LocalFree (hMem=0xa931f0) returned 0x0 [0077.869] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0077.869] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df60) returned 0x0 [0077.869] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df20) returned 0x0 [0077.869] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df20) returned 0x0 [0077.869] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0077.869] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df68) returned 0x0 [0077.869] GetCurrentObject (hdc=0xfffffffff9010722, type=0x1) returned 0x1b00017 [0077.869] GetCurrentObject (hdc=0xfffffffff9010722, type=0x2) returned 0x1900010 [0077.869] GetCurrentObject (hdc=0xfffffffff9010722, type=0x7) returned 0x29050250 [0077.869] GetCurrentObject (hdc=0xfffffffff9010722, type=0x6) returned 0x18a002e [0077.869] SaveDC (hdc=0xfffffffff9010722) returned 1 [0077.869] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x64040872 [0077.869] GetClipRgn (hdc=0xfffffffff9010722, hrgn=0x64040872) returned 0 [0077.869] SelectClipRgn (hdc=0xfffffffff9010722, hrgn=0x5204086f) returned 2 [0077.869] DeleteObject (ho=0x64040872) returned 1 [0077.869] DeleteObject (ho=0x5204086f) returned 1 [0077.869] OffsetViewportOrgEx (in: hdc=0xfffffffff9010722, x=0, y=0, lppt=0x21b3a18 | out: lppt=0x21b3a18) returned 1 [0077.869] IsAppThemed () returned 0x1 [0077.869] GetThemeAppProperties () returned 0x3 [0077.870] GetThemeAppProperties () returned 0x3 [0077.870] GetThemeBackgroundContentRect () returned 0x0 [0077.870] RestoreDC (hdc=0xfffffffff9010722, nSavedDC=-1) returned 1 [0077.870] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xfffffffff9010722) returned 0x0 [0077.870] IsAppThemed () returned 0x1 [0077.870] GetThemeAppProperties () returned 0x3 [0077.870] GetThemeAppProperties () returned 0x3 [0077.870] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e148) returned 0x0 [0077.870] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e128) returned 0x0 [0077.870] GetCurrentObject (hdc=0xfffffffff9010722, type=0x1) returned 0x1b00017 [0077.870] GetCurrentObject (hdc=0xfffffffff9010722, type=0x2) returned 0x1900010 [0077.870] GetCurrentObject (hdc=0xfffffffff9010722, type=0x7) returned 0x29050250 [0077.870] GetCurrentObject (hdc=0xfffffffff9010722, type=0x6) returned 0x18a002e [0077.870] SaveDC (hdc=0xfffffffff9010722) returned 1 [0077.870] GetTextAlign (hdc=0xfffffffff9010722) returned 0x0 [0077.870] GetTextColor (hdc=0xfffffffff9010722) returned 0x0 [0077.871] GetCurrentObject (hdc=0xfffffffff9010722, type=0x6) returned 0x18a002e [0077.871] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dc60 | out: pv=0x14dc60) returned 92 [0077.871] SelectObject (hdc=0xfffffffff9010722, h=0x120a086d) returned 0x18a002e [0077.871] GetBkMode (hdc=0xfffffffff9010722) returned 2 [0077.871] SetBkMode (hdc=0xfffffffff9010722, mode=1) returned 2 [0077.871] DrawTextExW (in: hdc=0xfffffffff9010722, lpchText="Enter Code", cchText=10, lprc=0x14dea0, format=0x2415, lpdtp=0x21b3ff8 | out: lpchText="Enter Code", lprc=0x14dea0) returned 13 [0077.871] DrawTextExW (in: hdc=0xfffffffff9010722, lpchText="Enter Code", cchText=10, lprc=0x14e0b8, format=0x2015, lpdtp=0x21b3ff8 | out: lpchText="Enter Code", lprc=0x14e0b8) returned 13 [0077.871] RestoreDC (hdc=0xfffffffff9010722, nSavedDC=-1) returned 1 [0077.871] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xfffffffff9010722) returned 0x0 [0077.871] GetFocus () returned 0x0 [0077.871] IsAppThemed () returned 0x1 [0077.871] GetThemeAppProperties () returned 0x3 [0077.871] GetThemeAppProperties () returned 0x3 [0077.871] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e438) returned 0x0 [0077.871] BitBlt (hdc=0xb010256, x=0, y=0, cx=123, cy=23, hdcSrc=0xfffffffff9010722, x1=0, y1=0, rop=0xcc0020) returned 1 [0077.871] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xfffffffff9010722) returned 0x0 [0077.871] SelectPalette (hdc=0xb010256, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0077.872] SelectObject (hdc=0xfffffffff9010722, h=0x185000f) returned 0x29050250 [0077.872] DeleteDC (hdc=0xfffffffff9010722) returned 1 [0077.872] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0077.872] EndPaint (hWnd=0x301fc, lpPaint=0x14e418) returned 1 [0077.872] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.872] IsWindowUnicode (hWnd=0x201da) returned 1 [0077.872] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.872] TranslateMessage (lpMsg=0x14edb0) returned 0 [0077.872] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0077.872] BeginPaint (in: hWnd=0x201da, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0x5010825 [0077.872] SelectPalette (hdc=0x5010825, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0077.872] CreateCompatibleDC (hdc=0x5010825) returned 0xfffffffffb010722 [0077.872] SelectObject (hdc=0xfffffffffb010722, h=0x29050250) returned 0x185000f [0077.872] GdipCreateFromHDC (hdc=0xfffffffffb010722, graphics=0x14e428) returned 0x0 [0077.872] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0077.872] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=40, height=20, combineMode=0x0) returned 0x0 [0077.872] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0077.873] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0077.873] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14e4b8) returned 0x0 [0077.873] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.873] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0077.873] LocalFree (hMem=0xa931f0) returned 0x0 [0077.873] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0077.873] GdipCreateRegion (region=0x14e450) returned 0x0 [0077.873] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0077.873] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0077.873] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0077.873] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0077.873] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0077.873] GetSystemMetrics (nIndex=42) returned 0 [0077.873] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:51") returned 4 [0077.873] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0077.873] GetClientRect (in: hWnd=0x201da, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0077.873] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0077.873] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0077.873] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0077.873] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0077.873] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0077.874] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.874] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0077.874] LocalFree (hMem=0xa931f0) returned 0x0 [0077.874] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0077.874] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.874] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0077.874] LocalFree (hMem=0xa931f0) returned 0x0 [0077.874] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0077.874] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0077.874] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0077.874] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0077.874] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0077.875] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0077.875] GetCurrentObject (hdc=0xfffffffffb010722, type=0x1) returned 0x1b00017 [0077.875] GetCurrentObject (hdc=0xfffffffffb010722, type=0x2) returned 0x1900010 [0077.875] GetCurrentObject (hdc=0xfffffffffb010722, type=0x7) returned 0x29050250 [0077.875] GetCurrentObject (hdc=0xfffffffffb010722, type=0x6) returned 0x18a002e [0077.875] SaveDC (hdc=0xfffffffffb010722) returned 1 [0077.875] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5304086f [0077.875] GetClipRgn (hdc=0xfffffffffb010722, hrgn=0x5304086f) returned 0 [0077.875] SelectClipRgn (hdc=0xfffffffffb010722, hrgn=0x67040872) returned 2 [0077.875] DeleteObject (ho=0x5304086f) returned 1 [0077.875] DeleteObject (ho=0x67040872) returned 1 [0077.875] OffsetViewportOrgEx (in: hdc=0xfffffffffb010722, x=0, y=0, lppt=0x21b4710 | out: lppt=0x21b4710) returned 1 [0077.875] GetNearestColor (hdc=0xfffffffffb010722, color=0xa0) returned 0xa0 [0077.875] CreateSolidBrush (color=0xa0) returned 0x69100860 [0077.875] FillRect (hDC=0xfffffffffb010722, lprc=0x14e1e8, hbr=0x69100860) returned 1 [0077.875] DeleteObject (ho=0x69100860) returned 1 [0077.875] RestoreDC (hdc=0xfffffffffb010722, nSavedDC=-1) returned 1 [0077.875] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xfffffffffb010722) returned 0x0 [0077.876] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd7a0dbd) returned 0x0 [0077.876] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0077.876] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0077.876] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0077.876] GetSystemMetrics (nIndex=42) returned 0 [0077.876] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:51") returned 4 [0077.876] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0077.876] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0077.876] GetCurrentObject (hdc=0xfffffffffb010722, type=0x1) returned 0x1b00017 [0077.876] GetCurrentObject (hdc=0xfffffffffb010722, type=0x2) returned 0x1900010 [0077.876] GetCurrentObject (hdc=0xfffffffffb010722, type=0x7) returned 0x29050250 [0077.876] GetCurrentObject (hdc=0xfffffffffb010722, type=0x6) returned 0x18a002e [0077.876] SaveDC (hdc=0xfffffffffb010722) returned 1 [0077.876] GetNearestColor (hdc=0xfffffffffb010722, color=0xffffff) returned 0xffffff [0077.876] RestoreDC (hdc=0xfffffffffb010722, nSavedDC=-1) returned 1 [0077.876] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xfffffffffb010722) returned 0x0 [0077.877] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0077.877] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0077.877] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0077.877] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0077.877] GetCurrentObject (hdc=0xfffffffffb010722, type=0x1) returned 0x1b00017 [0077.877] GetCurrentObject (hdc=0xfffffffffb010722, type=0x2) returned 0x1900010 [0077.877] GetCurrentObject (hdc=0xfffffffffb010722, type=0x7) returned 0x29050250 [0077.877] GetCurrentObject (hdc=0xfffffffffb010722, type=0x6) returned 0x18a002e [0077.877] SaveDC (hdc=0xfffffffffb010722) returned 1 [0077.877] GetTextAlign (hdc=0xfffffffffb010722) returned 0x0 [0077.877] GetTextColor (hdc=0xfffffffffb010722) returned 0x0 [0077.877] SetTextColor (hdc=0xfffffffffb010722, color=0xffffff) returned 0x0 [0077.877] GetCurrentObject (hdc=0xfffffffffb010722, type=0x6) returned 0x18a002e [0077.877] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0077.877] SelectObject (hdc=0xfffffffffb010722, h=0x200a0899) returned 0x18a002e [0077.877] GetBkMode (hdc=0xfffffffffb010722) returned 2 [0077.877] SetBkMode (hdc=0xfffffffffb010722, mode=1) returned 2 [0077.877] DrawTextExW (in: hdc=0xfffffffffb010722, lpchText="4:51", cchText=4, lprc=0x14e1c8, format=0x0, lpdtp=0x21b4fa0 | out: lpchText="4:51", lprc=0x14e1c8) returned 20 [0077.878] RestoreDC (hdc=0xfffffffffb010722, nSavedDC=-1) returned 1 [0077.878] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xfffffffffb010722) returned 0x0 [0077.878] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0077.878] BitBlt (hdc=0x5010825, x=0, y=0, cx=40, cy=20, hdcSrc=0xfffffffffb010722, x1=0, y1=0, rop=0xcc0020) returned 1 [0077.878] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xfffffffffb010722) returned 0x0 [0077.878] SelectPalette (hdc=0x5010825, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0077.878] SelectObject (hdc=0xfffffffffb010722, h=0x185000f) returned 0x29050250 [0077.878] DeleteDC (hdc=0xfffffffffb010722) returned 1 [0077.878] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0077.878] EndPaint (hWnd=0x201da, lpPaint=0x14e448) returned 1 [0077.878] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.878] IsWindowUnicode (hWnd=0x201dc) returned 1 [0077.878] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.878] TranslateMessage (lpMsg=0x14edb0) returned 0 [0077.878] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0077.878] BeginPaint (in: hWnd=0x201dc, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0x5010830 [0077.879] SelectPalette (hdc=0x5010830, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0077.879] CreateCompatibleDC (hdc=0x5010830) returned 0xfffffffffd010722 [0077.879] SelectObject (hdc=0xfffffffffd010722, h=0x29050250) returned 0x185000f [0077.879] GdipCreateFromHDC (hdc=0xfffffffffd010722, graphics=0x14e428) returned 0x0 [0077.879] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0077.879] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=144, height=13, combineMode=0x0) returned 0x0 [0077.879] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0077.879] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0077.879] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14e4b8) returned 0x0 [0077.879] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.879] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0077.879] LocalFree (hMem=0xa931f0) returned 0x0 [0077.879] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0077.879] GdipCreateRegion (region=0x14e450) returned 0x0 [0077.879] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0077.879] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0077.879] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0077.879] GetWindowTextLengthW (hWnd=0x201dc) returned 29 [0077.879] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201dc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1d [0077.880] GetSystemMetrics (nIndex=42) returned 0 [0077.880] GetWindowTextW (in: hWnd=0x201dc, lpString=0x14e320, nMaxCount=30 | out: lpString="Your Files Will Be Deleted on") returned 29 [0077.880] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201dc, Msg=0xd, wParam=0x1e, lParam=0x14e320) returned 0x1d [0077.880] GetClientRect (in: hWnd=0x201dc, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0077.880] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0077.880] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0077.880] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0077.880] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0077.880] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0077.880] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.880] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0077.880] LocalFree (hMem=0xa931f0) returned 0x0 [0077.880] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0077.880] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.880] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0077.880] LocalFree (hMem=0xa931f0) returned 0x0 [0077.880] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0077.880] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0077.880] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0077.880] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0077.880] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0077.881] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0077.881] GetCurrentObject (hdc=0xfffffffffd010722, type=0x1) returned 0x1b00017 [0077.881] GetCurrentObject (hdc=0xfffffffffd010722, type=0x2) returned 0x1900010 [0077.881] GetCurrentObject (hdc=0xfffffffffd010722, type=0x7) returned 0x29050250 [0077.881] GetCurrentObject (hdc=0xfffffffffd010722, type=0x6) returned 0x18a002e [0077.881] SaveDC (hdc=0xfffffffffd010722) returned 1 [0077.881] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x68040872 [0077.881] GetClipRgn (hdc=0xfffffffffd010722, hrgn=0x68040872) returned 0 [0077.881] SelectClipRgn (hdc=0xfffffffffd010722, hrgn=0x5504086f) returned 2 [0077.881] DeleteObject (ho=0x68040872) returned 1 [0077.881] DeleteObject (ho=0x5504086f) returned 1 [0077.881] OffsetViewportOrgEx (in: hdc=0xfffffffffd010722, x=0, y=0, lppt=0x21b5648 | out: lppt=0x21b5648) returned 1 [0077.881] GetNearestColor (hdc=0xfffffffffd010722, color=0xa0) returned 0xa0 [0077.881] CreateSolidBrush (color=0xa0) returned 0x6a100860 [0077.881] FillRect (hDC=0xfffffffffd010722, lprc=0x14e1e8, hbr=0x6a100860) returned 1 [0077.881] DeleteObject (ho=0x6a100860) returned 1 [0077.881] RestoreDC (hdc=0xfffffffffd010722, nSavedDC=-1) returned 1 [0077.881] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xfffffffffd010722) returned 0x0 [0077.881] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd780dbd) returned 0x0 [0077.882] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0077.882] GetWindowTextLengthW (hWnd=0x201dc) returned 29 [0077.882] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201dc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1d [0077.882] GetSystemMetrics (nIndex=42) returned 0 [0077.882] GetWindowTextW (in: hWnd=0x201dc, lpString=0x14e320, nMaxCount=30 | out: lpString="Your Files Will Be Deleted on") returned 29 [0077.882] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201dc, Msg=0xd, wParam=0x1e, lParam=0x14e320) returned 0x1d [0077.882] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0077.882] GetCurrentObject (hdc=0xfffffffffd010722, type=0x1) returned 0x1b00017 [0077.882] GetCurrentObject (hdc=0xfffffffffd010722, type=0x2) returned 0x1900010 [0077.882] GetCurrentObject (hdc=0xfffffffffd010722, type=0x7) returned 0x29050250 [0077.882] GetCurrentObject (hdc=0xfffffffffd010722, type=0x6) returned 0x18a002e [0077.882] SaveDC (hdc=0xfffffffffd010722) returned 1 [0077.882] GetNearestColor (hdc=0xfffffffffd010722, color=0xffffff) returned 0xffffff [0077.882] RestoreDC (hdc=0xfffffffffd010722, nSavedDC=-1) returned 1 [0077.882] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xfffffffffd010722) returned 0x0 [0077.882] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0077.882] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0077.882] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0077.883] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0077.883] GetCurrentObject (hdc=0xfffffffffd010722, type=0x1) returned 0x1b00017 [0077.883] GetCurrentObject (hdc=0xfffffffffd010722, type=0x2) returned 0x1900010 [0077.883] GetCurrentObject (hdc=0xfffffffffd010722, type=0x7) returned 0x29050250 [0077.883] GetCurrentObject (hdc=0xfffffffffd010722, type=0x6) returned 0x18a002e [0077.883] SaveDC (hdc=0xfffffffffd010722) returned 1 [0077.883] GetTextAlign (hdc=0xfffffffffd010722) returned 0x0 [0077.883] GetTextColor (hdc=0xfffffffffd010722) returned 0x0 [0077.883] SetTextColor (hdc=0xfffffffffd010722, color=0xffffff) returned 0x0 [0077.883] GetCurrentObject (hdc=0xfffffffffd010722, type=0x6) returned 0x18a002e [0077.883] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0077.883] SelectObject (hdc=0xfffffffffd010722, h=0xffffffffc80a01db) returned 0x18a002e [0077.883] GetBkMode (hdc=0xfffffffffd010722) returned 2 [0077.883] SetBkMode (hdc=0xfffffffffd010722, mode=1) returned 2 [0077.883] DrawTextExW (in: hdc=0xfffffffffd010722, lpchText="Your Files Will Be Deleted on", cchText=29, lprc=0x14e1c8, format=0x0, lpdtp=0x21b5f68 | out: lpchText="Your Files Will Be Deleted on", lprc=0x14e1c8) returned 13 [0077.883] RestoreDC (hdc=0xfffffffffd010722, nSavedDC=-1) returned 1 [0077.883] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xfffffffffd010722) returned 0x0 [0077.884] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0077.884] BitBlt (hdc=0x5010830, x=0, y=0, cx=144, cy=13, hdcSrc=0xfffffffffd010722, x1=0, y1=0, rop=0xcc0020) returned 1 [0077.884] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xfffffffffd010722) returned 0x0 [0077.884] SelectPalette (hdc=0x5010830, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0077.884] SelectObject (hdc=0xfffffffffd010722, h=0x185000f) returned 0x29050250 [0077.884] DeleteDC (hdc=0xfffffffffd010722) returned 1 [0077.884] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0077.884] EndPaint (hWnd=0x201dc, lpPaint=0x14e448) returned 1 [0077.884] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.884] IsWindowUnicode (hWnd=0x10206) returned 1 [0077.884] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.884] TranslateMessage (lpMsg=0x14edb0) returned 0 [0077.884] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0077.884] BeginPaint (in: hWnd=0x10206, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0xb010256 [0077.884] SelectPalette (hdc=0xb010256, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0077.884] CreateCompatibleDC (hdc=0xb010256) returned 0xffffffffff010722 [0077.884] SelectObject (hdc=0xffffffffff010722, h=0x29050250) returned 0x185000f [0077.885] GdipCreateFromHDC (hdc=0xffffffffff010722, graphics=0x14e428) returned 0x0 [0077.885] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0077.885] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=55, height=26, combineMode=0x0) returned 0x0 [0077.885] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0077.885] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0077.885] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14e4b8) returned 0x0 [0077.885] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.885] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0077.885] LocalFree (hMem=0xa931f0) returned 0x0 [0077.885] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0077.885] GdipCreateRegion (region=0x14e450) returned 0x0 [0077.885] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0077.885] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0077.885] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0077.885] GetWindowTextLengthW (hWnd=0x10206) returned 20 [0077.885] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10206, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x14 [0077.885] GetSystemMetrics (nIndex=42) returned 0 [0077.885] GetWindowTextW (in: hWnd=0x10206, lpString=0x14e330, nMaxCount=21 | out: lpString="208 Files\r\nEncrypted") returned 20 [0077.885] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10206, Msg=0xd, wParam=0x15, lParam=0x14e330) returned 0x14 [0077.885] GetClientRect (in: hWnd=0x10206, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0077.885] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0077.886] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0077.886] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0077.886] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0077.886] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0077.886] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.886] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0077.886] LocalFree (hMem=0xa931f0) returned 0x0 [0077.886] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0077.886] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.886] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0077.886] LocalFree (hMem=0xa931f0) returned 0x0 [0077.886] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0077.886] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0077.886] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0077.886] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0077.886] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0077.886] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0077.886] GetCurrentObject (hdc=0xffffffffff010722, type=0x1) returned 0x1b00017 [0077.886] GetCurrentObject (hdc=0xffffffffff010722, type=0x2) returned 0x1900010 [0077.886] GetCurrentObject (hdc=0xffffffffff010722, type=0x7) returned 0x29050250 [0077.886] GetCurrentObject (hdc=0xffffffffff010722, type=0x6) returned 0x18a002e [0077.887] SaveDC (hdc=0xffffffffff010722) returned 1 [0077.887] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5604086f [0077.887] GetClipRgn (hdc=0xffffffffff010722, hrgn=0x5604086f) returned 0 [0077.887] SelectClipRgn (hdc=0xffffffffff010722, hrgn=0x6a040872) returned 2 [0077.887] DeleteObject (ho=0x5604086f) returned 1 [0077.887] DeleteObject (ho=0x6a040872) returned 1 [0077.887] OffsetViewportOrgEx (in: hdc=0xffffffffff010722, x=0, y=0, lppt=0x21b65e0 | out: lppt=0x21b65e0) returned 1 [0077.887] GetNearestColor (hdc=0xffffffffff010722, color=0xa0) returned 0xa0 [0077.887] CreateSolidBrush (color=0xa0) returned 0x6b100860 [0077.887] FillRect (hDC=0xffffffffff010722, lprc=0x14e1e8, hbr=0x6b100860) returned 1 [0077.887] DeleteObject (ho=0x6b100860) returned 1 [0077.887] RestoreDC (hdc=0xffffffffff010722, nSavedDC=-1) returned 1 [0077.887] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffff010722) returned 0x0 [0077.887] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd760dbd) returned 0x0 [0077.887] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0077.887] GetWindowTextLengthW (hWnd=0x10206) returned 20 [0077.887] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10206, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x14 [0077.887] GetSystemMetrics (nIndex=42) returned 0 [0077.887] GetWindowTextW (in: hWnd=0x10206, lpString=0x14e330, nMaxCount=21 | out: lpString="208 Files\r\nEncrypted") returned 20 [0077.887] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10206, Msg=0xd, wParam=0x15, lParam=0x14e330) returned 0x14 [0077.888] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0077.888] GetCurrentObject (hdc=0xffffffffff010722, type=0x1) returned 0x1b00017 [0077.888] GetCurrentObject (hdc=0xffffffffff010722, type=0x2) returned 0x1900010 [0077.888] GetCurrentObject (hdc=0xffffffffff010722, type=0x7) returned 0x29050250 [0077.888] GetCurrentObject (hdc=0xffffffffff010722, type=0x6) returned 0x18a002e [0077.888] SaveDC (hdc=0xffffffffff010722) returned 1 [0077.888] GetNearestColor (hdc=0xffffffffff010722, color=0xffffff) returned 0xffffff [0077.888] RestoreDC (hdc=0xffffffffff010722, nSavedDC=-1) returned 1 [0077.888] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffff010722) returned 0x0 [0077.888] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0077.888] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0077.888] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0077.888] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0077.888] GetCurrentObject (hdc=0xffffffffff010722, type=0x1) returned 0x1b00017 [0077.888] GetCurrentObject (hdc=0xffffffffff010722, type=0x2) returned 0x1900010 [0077.888] GetCurrentObject (hdc=0xffffffffff010722, type=0x7) returned 0x29050250 [0077.888] GetCurrentObject (hdc=0xffffffffff010722, type=0x6) returned 0x18a002e [0077.889] SaveDC (hdc=0xffffffffff010722) returned 1 [0077.889] GetTextAlign (hdc=0xffffffffff010722) returned 0x0 [0077.889] GetTextColor (hdc=0xffffffffff010722) returned 0x0 [0077.889] SetTextColor (hdc=0xffffffffff010722, color=0xffffff) returned 0x0 [0077.889] GetCurrentObject (hdc=0xffffffffff010722, type=0x6) returned 0x18a002e [0077.889] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0077.889] SelectObject (hdc=0xffffffffff010722, h=0xb0a087e) returned 0x18a002e [0077.889] GetBkMode (hdc=0xffffffffff010722) returned 2 [0077.889] SetBkMode (hdc=0xffffffffff010722, mode=1) returned 2 [0077.889] DrawTextExW (in: hdc=0xffffffffff010722, lpchText="208 Files\r\nEncrypted", cchText=20, lprc=0x14e1c8, format=0x0, lpdtp=0x21b6ed0 | out: lpchText="208 Files\r\nEncrypted", lprc=0x14e1c8) returned 26 [0077.889] RestoreDC (hdc=0xffffffffff010722, nSavedDC=-1) returned 1 [0077.889] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffff010722) returned 0x0 [0077.889] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0077.890] BitBlt (hdc=0xb010256, x=0, y=0, cx=55, cy=26, hdcSrc=0xffffffffff010722, x1=0, y1=0, rop=0xcc0020) returned 1 [0077.890] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffff010722) returned 0x0 [0077.890] SelectPalette (hdc=0xb010256, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0077.890] SelectObject (hdc=0xffffffffff010722, h=0x185000f) returned 0x29050250 [0077.890] DeleteDC (hdc=0xffffffffff010722) returned 1 [0077.890] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0077.890] EndPaint (hWnd=0x10206, lpPaint=0x14e448) returned 1 [0077.890] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.890] IsWindowUnicode (hWnd=0x10208) returned 1 [0077.890] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.890] TranslateMessage (lpMsg=0x14edb0) returned 0 [0077.890] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0077.890] BeginPaint (in: hWnd=0x10208, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0x5010825 [0077.891] SelectPalette (hdc=0x5010825, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0077.891] CreateCompatibleDC (hdc=0x5010825) returned 0x1010722 [0077.891] SelectObject (hdc=0x1010722, h=0x29050250) returned 0x185000f [0077.891] GdipCreateFromHDC (hdc=0x1010722, graphics=0x14e428) returned 0x0 [0077.891] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0077.891] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=87, height=15, combineMode=0x0) returned 0x0 [0077.891] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0077.891] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0077.891] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14e4b8) returned 0x0 [0077.891] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.891] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0077.891] LocalFree (hMem=0xa931f0) returned 0x0 [0077.891] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0077.891] GdipCreateRegion (region=0x14e450) returned 0x0 [0077.891] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0077.891] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0077.892] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0077.892] GetWindowTextLengthW (hWnd=0x10208) returned 16 [0077.892] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10208, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10 [0077.892] GetSystemMetrics (nIndex=42) returned 0 [0077.892] GetWindowTextW (in: hWnd=0x10208, lpString=0x14e330, nMaxCount=17 | out: lpString="Bitcoin Address:") returned 16 [0077.892] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10208, Msg=0xd, wParam=0x11, lParam=0x14e330) returned 0x10 [0077.892] GetClientRect (in: hWnd=0x10208, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0077.892] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0077.892] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0077.892] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0077.892] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0077.892] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0077.892] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.892] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0077.893] LocalFree (hMem=0xa931f0) returned 0x0 [0077.893] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0077.893] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.893] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0077.893] LocalFree (hMem=0xa931f0) returned 0x0 [0077.893] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0077.893] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0077.893] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0077.893] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0077.893] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0077.893] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0077.893] GetCurrentObject (hdc=0x1010722, type=0x1) returned 0x1b00017 [0077.893] GetCurrentObject (hdc=0x1010722, type=0x2) returned 0x1900010 [0077.893] GetCurrentObject (hdc=0x1010722, type=0x7) returned 0x29050250 [0077.893] GetCurrentObject (hdc=0x1010722, type=0x6) returned 0x18a002e [0077.893] SaveDC (hdc=0x1010722) returned 1 [0077.893] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6b040872 [0077.893] GetClipRgn (hdc=0x1010722, hrgn=0x6b040872) returned 0 [0077.893] SelectClipRgn (hdc=0x1010722, hrgn=0x5804086f) returned 2 [0077.894] DeleteObject (ho=0x6b040872) returned 1 [0077.894] DeleteObject (ho=0x5804086f) returned 1 [0077.894] OffsetViewportOrgEx (in: hdc=0x1010722, x=0, y=0, lppt=0x21b7530 | out: lppt=0x21b7530) returned 1 [0077.894] GetNearestColor (hdc=0x1010722, color=0xa0) returned 0xa0 [0077.894] CreateSolidBrush (color=0xa0) returned 0x6c100860 [0077.894] FillRect (hDC=0x1010722, lprc=0x14e1e8, hbr=0x6c100860) returned 1 [0077.894] DeleteObject (ho=0x6c100860) returned 1 [0077.894] RestoreDC (hdc=0x1010722, nSavedDC=-1) returned 1 [0077.894] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x1010722) returned 0x0 [0077.894] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd740dbd) returned 0x0 [0077.894] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0077.894] GetWindowTextLengthW (hWnd=0x10208) returned 16 [0077.894] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10208, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10 [0077.894] GetSystemMetrics (nIndex=42) returned 0 [0077.894] GetWindowTextW (in: hWnd=0x10208, lpString=0x14e330, nMaxCount=17 | out: lpString="Bitcoin Address:") returned 16 [0077.894] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10208, Msg=0xd, wParam=0x11, lParam=0x14e330) returned 0x10 [0077.894] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0077.894] GetCurrentObject (hdc=0x1010722, type=0x1) returned 0x1b00017 [0077.894] GetCurrentObject (hdc=0x1010722, type=0x2) returned 0x1900010 [0077.894] GetCurrentObject (hdc=0x1010722, type=0x7) returned 0x29050250 [0077.895] GetCurrentObject (hdc=0x1010722, type=0x6) returned 0x18a002e [0077.895] SaveDC (hdc=0x1010722) returned 1 [0077.895] GetNearestColor (hdc=0x1010722, color=0xffffff) returned 0xffffff [0077.895] RestoreDC (hdc=0x1010722, nSavedDC=-1) returned 1 [0077.895] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x1010722) returned 0x0 [0077.895] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0077.895] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0077.895] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0077.895] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0077.895] GetCurrentObject (hdc=0x1010722, type=0x1) returned 0x1b00017 [0077.895] GetCurrentObject (hdc=0x1010722, type=0x2) returned 0x1900010 [0077.895] GetCurrentObject (hdc=0x1010722, type=0x7) returned 0x29050250 [0077.895] GetCurrentObject (hdc=0x1010722, type=0x6) returned 0x18a002e [0077.895] SaveDC (hdc=0x1010722) returned 1 [0077.895] GetTextAlign (hdc=0x1010722) returned 0x0 [0077.895] GetTextColor (hdc=0x1010722) returned 0x0 [0077.896] SetTextColor (hdc=0x1010722, color=0xffffff) returned 0x0 [0077.896] GetCurrentObject (hdc=0x1010722, type=0x6) returned 0x18a002e [0077.896] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0077.896] SelectObject (hdc=0x1010722, h=0x370a08a3) returned 0x18a002e [0077.896] GetBkMode (hdc=0x1010722) returned 2 [0077.896] SetBkMode (hdc=0x1010722, mode=1) returned 2 [0077.896] DrawTextExW (in: hdc=0x1010722, lpchText="Bitcoin Address:", cchText=16, lprc=0x14e1c8, format=0x0, lpdtp=0x21b7e08 | out: lpchText="Bitcoin Address:", lprc=0x14e1c8) returned 15 [0077.896] RestoreDC (hdc=0x1010722, nSavedDC=-1) returned 1 [0077.896] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x1010722) returned 0x0 [0077.896] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0077.896] BitBlt (hdc=0x5010825, x=0, y=0, cx=87, cy=15, hdcSrc=0x1010722, x1=0, y1=0, rop=0xcc0020) returned 1 [0077.896] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x1010722) returned 0x0 [0077.896] SelectPalette (hdc=0x5010825, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0077.896] SelectObject (hdc=0x1010722, h=0x185000f) returned 0x29050250 [0077.896] DeleteDC (hdc=0x1010722) returned 1 [0077.896] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0077.897] EndPaint (hWnd=0x10208, lpPaint=0x14e448) returned 1 [0077.897] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.897] IsWindowUnicode (hWnd=0x1020a) returned 1 [0077.897] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.897] TranslateMessage (lpMsg=0x14edb0) returned 0 [0077.897] DispatchMessageW (lpMsg=0x14edb0) returned 0x1 [0077.897] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020a, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0077.897] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x138, wParam=0x2b0108a5, lParam=0x1020a) returned 0x1100059 [0077.897] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.897] IsWindowUnicode (hWnd=0x1020c) returned 1 [0077.897] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.897] TranslateMessage (lpMsg=0x14edb0) returned 0 [0077.897] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0077.898] BeginPaint (in: hWnd=0x1020c, lpPaint=0x14e478 | out: lpPaint=0x14e478) returned 0xb010256 [0077.898] SelectPalette (hdc=0xb010256, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0077.898] CreateCompatibleDC (hdc=0xb010256) returned 0x4010722 [0077.898] SelectObject (hdc=0x4010722, h=0x29050250) returned 0x185000f [0077.898] GdipCreateFromHDC (hdc=0x4010722, graphics=0x14e3f8) returned 0x0 [0077.898] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0077.898] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=408, height=23, combineMode=0x0) returned 0x0 [0077.898] GdipCreateMatrix (matrix=0x14e420) returned 0x0 [0077.898] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0077.898] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14e488) returned 0x0 [0077.898] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.898] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0077.898] LocalFree (hMem=0xa931f0) returned 0x0 [0077.898] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0077.898] GdipCreateRegion (region=0x14e420) returned 0x0 [0077.898] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0077.898] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e480) returned 0x0 [0077.898] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e520) returned 0x0 [0077.898] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd720dbd) returned 0x0 [0077.899] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0077.899] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e198) returned 0x0 [0077.899] GetCurrentObject (hdc=0x4010722, type=0x1) returned 0x1b00017 [0077.899] GetCurrentObject (hdc=0x4010722, type=0x2) returned 0x1900010 [0077.899] GetCurrentObject (hdc=0x4010722, type=0x7) returned 0x29050250 [0077.899] GetCurrentObject (hdc=0x4010722, type=0x6) returned 0x18a002e [0077.899] SaveDC (hdc=0x4010722) returned 1 [0077.899] GetNearestColor (hdc=0x4010722, color=0xa0) returned 0xa0 [0077.899] GetNearestColor (hdc=0x4010722, color=0x35) returned 0x35 [0077.899] GetNearestColor (hdc=0x4010722, color=0x0) returned 0x0 [0077.899] GetNearestColor (hdc=0x4010722, color=0x4848e5) returned 0x4848e5 [0077.899] GetNearestColor (hdc=0x4010722, color=0x0) returned 0x0 [0077.899] GetNearestColor (hdc=0x4010722, color=0x5151ff) returned 0x5151ff [0077.899] GetNearestColor (hdc=0x4010722, color=0x4848e5) returned 0x4848e5 [0077.899] GetNearestColor (hdc=0x4010722, color=0xc0) returned 0xc0 [0077.900] GetNearestColor (hdc=0x4010722, color=0x0) returned 0x0 [0077.900] RestoreDC (hdc=0x4010722, nSavedDC=-1) returned 1 [0077.900] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x4010722) returned 0x0 [0077.900] IsAppThemed () returned 0x1 [0077.900] GetThemeAppProperties () returned 0x3 [0077.900] GetThemeAppProperties () returned 0x3 [0077.900] IsAppThemed () returned 0x1 [0077.900] GetThemeAppProperties () returned 0x3 [0077.900] GetThemeAppProperties () returned 0x3 [0077.900] DrawTextExW (in: hdc=0x8010893, lpchText="Check", cchText=5, lprc=0x14de08, format=0x2415, lpdtp=0x21b88f8 | out: lpchText="Check", lprc=0x14de08) returned 13 [0077.900] IsAppThemed () returned 0x1 [0077.900] GetThemeAppProperties () returned 0x3 [0077.900] GetThemeAppProperties () returned 0x3 [0077.900] IsAppThemed () returned 0x1 [0077.900] GetThemeAppProperties () returned 0x3 [0077.900] GetThemeAppProperties () returned 0x3 [0077.900] IsAppThemed () returned 0x1 [0077.900] GetThemeAppProperties () returned 0x3 [0077.900] GetThemeAppProperties () returned 0x3 [0077.900] IsAppThemed () returned 0x1 [0077.900] GetThemeAppProperties () returned 0x3 [0077.900] GetThemeAppProperties () returned 0x3 [0077.900] IsThemePartDefined () returned 0x1 [0077.900] IsAppThemed () returned 0x1 [0077.900] GetThemeAppProperties () returned 0x3 [0077.900] GetThemeAppProperties () returned 0x3 [0077.900] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0077.900] IsAppThemed () returned 0x1 [0077.901] GetThemeAppProperties () returned 0x3 [0077.901] GetThemeAppProperties () returned 0x3 [0077.901] IsAppThemed () returned 0x1 [0077.901] GetThemeAppProperties () returned 0x3 [0077.901] GetThemeAppProperties () returned 0x3 [0077.901] IsThemePartDefined () returned 0x1 [0077.901] GdipCreateRegion (region=0x14df00) returned 0x0 [0077.901] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0077.901] GdipCreateMatrix (matrix=0x14df00) returned 0x0 [0077.901] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0077.901] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14df68) returned 0x0 [0077.901] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.901] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0077.901] LocalFree (hMem=0xa931f0) returned 0x0 [0077.901] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.901] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0077.901] LocalFree (hMem=0xa931f0) returned 0x0 [0077.901] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0077.901] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14dfd0) returned 0x0 [0077.901] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df90) returned 0x0 [0077.901] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df90) returned 0x0 [0077.901] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0077.901] GdipGetDC (graphics=0x1afd81d0, hdc=0x14dfd8) returned 0x0 [0077.901] GetCurrentObject (hdc=0x4010722, type=0x1) returned 0x1b00017 [0077.902] GetCurrentObject (hdc=0x4010722, type=0x2) returned 0x1900010 [0077.902] GetCurrentObject (hdc=0x4010722, type=0x7) returned 0x29050250 [0077.902] GetCurrentObject (hdc=0x4010722, type=0x6) returned 0x18a002e [0077.902] SaveDC (hdc=0x4010722) returned 1 [0077.902] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5a04086f [0077.902] GetClipRgn (hdc=0x4010722, hrgn=0x5a04086f) returned 0 [0077.902] SelectClipRgn (hdc=0x4010722, hrgn=0x6f040872) returned 2 [0077.902] DeleteObject (ho=0x5a04086f) returned 1 [0077.902] DeleteObject (ho=0x6f040872) returned 1 [0077.902] OffsetViewportOrgEx (in: hdc=0x4010722, x=0, y=0, lppt=0x21b92e0 | out: lppt=0x21b92e0) returned 1 [0077.902] DrawThemeParentBackground () returned 0x0 [0077.902] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14db88 | out: lpwndpl=0x14db88) returned 1 [0077.902] GetClientRect (in: hWnd=0x401fa, lpRect=0x14daa0 | out: lpRect=0x14daa0) returned 1 [0077.902] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0077.902] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0077.902] GetSystemMetrics (nIndex=42) returned 0 [0077.902] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d800, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0077.902] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d800) returned 0xc [0077.902] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d888 | out: lpRect=0x14d888) returned 1 [0077.902] GetCurrentObject (hdc=0x4010722, type=0x1) returned 0x1b00017 [0077.903] GetCurrentObject (hdc=0x4010722, type=0x2) returned 0x1900010 [0077.903] GetCurrentObject (hdc=0x4010722, type=0x7) returned 0x29050250 [0077.903] GetCurrentObject (hdc=0x4010722, type=0x6) returned 0x18a002e [0077.903] SaveDC (hdc=0x4010722) returned 2 [0077.903] GetNearestColor (hdc=0x4010722, color=0xa0) returned 0xa0 [0077.903] CreateSolidBrush (color=0xa0) returned 0x6d100860 [0077.903] FillRect (hDC=0x4010722, lprc=0x14d578, hbr=0x6d100860) returned 1 [0077.903] DeleteObject (ho=0x6d100860) returned 1 [0077.903] RestoreDC (hdc=0x4010722, nSavedDC=-1) returned 1 [0077.903] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0077.903] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0077.903] GetSystemMetrics (nIndex=42) returned 0 [0077.903] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0077.903] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0077.903] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d7b8 | out: lpRect=0x14d7b8) returned 1 [0077.903] GetCurrentObject (hdc=0x4010722, type=0x1) returned 0x1b00017 [0077.903] GetCurrentObject (hdc=0x4010722, type=0x2) returned 0x1900010 [0077.903] GetCurrentObject (hdc=0x4010722, type=0x7) returned 0x29050250 [0077.903] GetCurrentObject (hdc=0x4010722, type=0x6) returned 0x18a002e [0077.904] SaveDC (hdc=0x4010722) returned 2 [0077.904] GetNearestColor (hdc=0x4010722, color=0xa0) returned 0xa0 [0077.904] CreateSolidBrush (color=0xa0) returned 0x6e100860 [0077.904] FillRect (hDC=0x4010722, lprc=0x14d4a8, hbr=0x6e100860) returned 1 [0077.904] DeleteObject (ho=0x6e100860) returned 1 [0077.904] RestoreDC (hdc=0x4010722, nSavedDC=-1) returned 1 [0077.904] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0077.904] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0077.904] GetSystemMetrics (nIndex=42) returned 0 [0077.904] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0077.904] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0077.904] RestoreDC (hdc=0x4010722, nSavedDC=-1) returned 1 [0077.904] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x4010722) returned 0x0 [0077.904] IsAppThemed () returned 0x1 [0077.904] GetThemeAppProperties () returned 0x3 [0077.905] GetThemeAppProperties () returned 0x3 [0077.905] IsAppThemed () returned 0x1 [0077.905] GetThemeAppProperties () returned 0x3 [0077.905] GetThemeAppProperties () returned 0x3 [0077.905] IsThemePartDefined () returned 0x1 [0077.905] GdipCreateRegion (region=0x14dea0) returned 0x0 [0077.905] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0077.905] GdipCreateMatrix (matrix=0x14dea0) returned 0x0 [0077.905] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0077.905] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14df08) returned 0x0 [0077.905] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.905] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0077.905] LocalFree (hMem=0xa931f0) returned 0x0 [0077.905] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.905] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0077.905] LocalFree (hMem=0xa931f0) returned 0x0 [0077.975] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0077.975] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df70) returned 0x0 [0077.976] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df30) returned 0x0 [0077.976] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df30) returned 0x0 [0077.976] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0077.976] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df78) returned 0x0 [0077.976] GetCurrentObject (hdc=0x4010722, type=0x1) returned 0x1b00017 [0077.976] GetCurrentObject (hdc=0x4010722, type=0x2) returned 0x1900010 [0077.976] GetCurrentObject (hdc=0x4010722, type=0x7) returned 0x29050250 [0077.976] GetCurrentObject (hdc=0x4010722, type=0x6) returned 0x18a002e [0077.976] SaveDC (hdc=0x4010722) returned 1 [0077.976] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x70040872 [0077.976] GetClipRgn (hdc=0x4010722, hrgn=0x70040872) returned 0 [0077.976] SelectClipRgn (hdc=0x4010722, hrgn=0x5c04086f) returned 2 [0077.976] DeleteObject (ho=0x70040872) returned 1 [0077.976] DeleteObject (ho=0x5c04086f) returned 1 [0077.976] OffsetViewportOrgEx (in: hdc=0x4010722, x=0, y=0, lppt=0x21ba0e8 | out: lppt=0x21ba0e8) returned 1 [0077.976] IsAppThemed () returned 0x1 [0077.977] GetThemeAppProperties () returned 0x3 [0077.977] GetThemeAppProperties () returned 0x3 [0077.977] DrawThemeBackground () returned 0x0 [0077.977] RestoreDC (hdc=0x4010722, nSavedDC=-1) returned 1 [0077.977] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x4010722) returned 0x0 [0077.977] GdipCreateRegion (region=0x14de90) returned 0x0 [0077.977] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0077.977] GdipCreateMatrix (matrix=0x14de90) returned 0x0 [0077.977] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0077.977] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14def8) returned 0x0 [0077.977] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.977] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0077.977] LocalFree (hMem=0xa931f0) returned 0x0 [0077.977] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0077.977] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0077.978] LocalFree (hMem=0xa931f0) returned 0x0 [0077.978] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0077.978] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df60) returned 0x0 [0077.978] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df20) returned 0x0 [0077.978] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df20) returned 0x0 [0077.978] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0077.978] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df68) returned 0x0 [0077.979] GetCurrentObject (hdc=0x4010722, type=0x1) returned 0x1b00017 [0077.979] GetCurrentObject (hdc=0x4010722, type=0x2) returned 0x1900010 [0077.979] GetCurrentObject (hdc=0x4010722, type=0x7) returned 0x29050250 [0077.979] GetCurrentObject (hdc=0x4010722, type=0x6) returned 0x18a002e [0077.979] SaveDC (hdc=0x4010722) returned 1 [0077.979] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x5d04086f [0077.979] GetClipRgn (hdc=0x4010722, hrgn=0x5d04086f) returned 0 [0077.979] SelectClipRgn (hdc=0x4010722, hrgn=0x71040872) returned 2 [0077.979] DeleteObject (ho=0x5d04086f) returned 1 [0077.979] DeleteObject (ho=0x71040872) returned 1 [0077.979] OffsetViewportOrgEx (in: hdc=0x4010722, x=0, y=0, lppt=0x21ba5c0 | out: lppt=0x21ba5c0) returned 1 [0077.979] IsAppThemed () returned 0x1 [0077.979] GetThemeAppProperties () returned 0x3 [0077.979] GetThemeAppProperties () returned 0x3 [0077.979] GetThemeBackgroundContentRect () returned 0x0 [0077.979] RestoreDC (hdc=0x4010722, nSavedDC=-1) returned 1 [0077.979] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x4010722) returned 0x0 [0077.980] IsAppThemed () returned 0x1 [0077.980] GetThemeAppProperties () returned 0x3 [0077.980] GetThemeAppProperties () returned 0x3 [0077.980] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e148) returned 0x0 [0077.980] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e128) returned 0x0 [0077.980] GetCurrentObject (hdc=0x4010722, type=0x1) returned 0x1b00017 [0077.980] GetCurrentObject (hdc=0x4010722, type=0x2) returned 0x1900010 [0077.980] GetCurrentObject (hdc=0x4010722, type=0x7) returned 0x29050250 [0077.980] GetCurrentObject (hdc=0x4010722, type=0x6) returned 0x18a002e [0077.980] SaveDC (hdc=0x4010722) returned 1 [0077.980] GetTextAlign (hdc=0x4010722) returned 0x0 [0077.980] GetTextColor (hdc=0x4010722) returned 0x0 [0077.980] GetCurrentObject (hdc=0x4010722, type=0x6) returned 0x18a002e [0077.980] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dc60 | out: pv=0x14dc60) returned 92 [0077.980] SelectObject (hdc=0x4010722, h=0x120a086d) returned 0x18a002e [0077.980] GetBkMode (hdc=0x4010722) returned 2 [0077.980] SetBkMode (hdc=0x4010722, mode=1) returned 2 [0077.980] DrawTextExW (in: hdc=0x4010722, lpchText="Check", cchText=5, lprc=0x14dea0, format=0x2415, lpdtp=0x21baba0 | out: lpchText="Check", lprc=0x14dea0) returned 13 [0077.981] DrawTextExW (in: hdc=0x4010722, lpchText="Check", cchText=5, lprc=0x14e0b8, format=0x2015, lpdtp=0x21baba0 | out: lpchText="Check", lprc=0x14e0b8) returned 13 [0077.981] RestoreDC (hdc=0x4010722, nSavedDC=-1) returned 1 [0077.981] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x4010722) returned 0x0 [0077.981] GetFocus () returned 0x0 [0077.988] IsAppThemed () returned 0x1 [0077.988] GetThemeAppProperties () returned 0x3 [0077.988] GetThemeAppProperties () returned 0x3 [0077.988] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e438) returned 0x0 [0077.988] BitBlt (hdc=0xb010256, x=0, y=0, cx=408, cy=23, hdcSrc=0x4010722, x1=0, y1=0, rop=0xcc0020) returned 1 [0077.988] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x4010722) returned 0x0 [0077.988] SelectPalette (hdc=0xb010256, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0077.988] SelectObject (hdc=0x4010722, h=0x185000f) returned 0x29050250 [0077.988] DeleteDC (hdc=0x4010722) returned 1 [0077.988] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0077.988] EndPaint (hWnd=0x1020c, lpPaint=0x14e418) returned 1 [0077.988] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0077.988] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x88, wParam=0x4, lParam=0x0) returned 0x0 [0077.989] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0077.989] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0077.989] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0077.989] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0077.990] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14def8 | out: lpwndpl=0x14def8) returned 1 [0077.990] GetClientRect (in: hWnd=0x401fa, lpRect=0x14de10 | out: lpRect=0x14de10) returned 1 [0077.990] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0077.990] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0077.990] GetSystemMetrics (nIndex=42) returned 0 [0077.990] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14db70, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0077.990] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14db70) returned 0xc [0077.990] GetClientRect (in: hWnd=0x401fa, lpRect=0x14dbf8 | out: lpRect=0x14dbf8) returned 1 [0077.990] GetCurrentObject (hdc=0x5010830, type=0x1) returned 0x1b00017 [0077.990] GetCurrentObject (hdc=0x5010830, type=0x2) returned 0x1900010 [0077.990] GetCurrentObject (hdc=0x5010830, type=0x7) returned 0x1050032 [0077.990] GetCurrentObject (hdc=0x5010830, type=0x6) returned 0x18a002e [0077.990] SaveDC (hdc=0x5010830) returned 1 [0077.990] GetNearestColor (hdc=0x5010830, color=0xa0) returned 0xa0 [0077.990] CreateSolidBrush (color=0xa0) returned 0x6f100860 [0077.990] FillRect (hDC=0x5010830, lprc=0x14d8e8, hbr=0x6f100860) returned 1 [0077.990] DeleteObject (ho=0x6f100860) returned 1 [0077.991] RestoreDC (hdc=0x5010830, nSavedDC=-1) returned 1 [0077.991] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301fc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0077.991] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x301fc, Msg=0x14, wParam=0x5010825, lParam=0x0) returned 0x1 [0077.991] GetStockObject (i=5) returned 0x1900015 [0077.991] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0077.991] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201dc, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0077.992] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10206, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0077.992] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10208, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0077.992] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0077.992] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x138, wParam=0x5010825, lParam=0x1020a) returned 0x1100059 [0077.993] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14d598 | out: lpwndpl=0x14d598) returned 1 [0077.993] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d4b0 | out: lpRect=0x14d4b0) returned 1 [0077.993] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0077.993] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0077.993] GetSystemMetrics (nIndex=42) returned 0 [0077.993] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d210, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0077.993] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d210) returned 0xc [0077.993] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d298 | out: lpRect=0x14d298) returned 1 [0077.993] GetCurrentObject (hdc=0x4d01024b, type=0x1) returned 0x1b00017 [0077.993] GetCurrentObject (hdc=0x4d01024b, type=0x2) returned 0x1900010 [0077.993] GetCurrentObject (hdc=0x4d01024b, type=0x7) returned 0x6205007f [0077.993] GetCurrentObject (hdc=0x4d01024b, type=0x6) returned 0x18a002e [0077.993] SaveDC (hdc=0x4d01024b) returned 1 [0077.994] GetNearestColor (hdc=0x4d01024b, color=0xa0) returned 0xa0 [0077.994] CreateSolidBrush (color=0xa0) returned 0x70100860 [0077.994] FillRect (hDC=0x4d01024b, lprc=0x14cf88, hbr=0x70100860) returned 1 [0077.994] DeleteObject (ho=0x70100860) returned 1 [0077.994] RestoreDC (hdc=0x4d01024b, nSavedDC=-1) returned 1 [0077.994] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0077.994] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0077.994] GetSystemMetrics (nIndex=42) returned 0 [0077.994] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d140, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0077.994] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d140) returned 0xc [0077.994] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d1c8 | out: lpRect=0x14d1c8) returned 1 [0077.994] GetCurrentObject (hdc=0x4d01024b, type=0x1) returned 0x1b00017 [0077.994] GetCurrentObject (hdc=0x4d01024b, type=0x2) returned 0x1900010 [0077.994] GetCurrentObject (hdc=0x4d01024b, type=0x7) returned 0x6205007f [0077.994] GetCurrentObject (hdc=0x4d01024b, type=0x6) returned 0x18a002e [0077.994] SaveDC (hdc=0x4d01024b) returned 1 [0077.994] GetNearestColor (hdc=0x4d01024b, color=0xa0) returned 0xa0 [0077.994] CreateSolidBrush (color=0xa0) returned 0x71100860 [0077.994] FillRect (hDC=0x4d01024b, lprc=0x14ceb8, hbr=0x71100860) returned 1 [0077.995] DeleteObject (ho=0x71100860) returned 1 [0077.995] RestoreDC (hdc=0x4d01024b, nSavedDC=-1) returned 1 [0077.995] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0077.995] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0077.995] GetSystemMetrics (nIndex=42) returned 0 [0077.995] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d140, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0077.995] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d140) returned 0xc [0077.995] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020a, Msg=0x14, wParam=0x5010825, lParam=0x0) returned 0x1 [0077.996] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0077.996] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x14, wParam=0xb010256, lParam=0x0) returned 0x1 [0077.996] GetStockObject (i=5) returned 0x1900015 [0077.996] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0077.996] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x138, wParam=0x5010825, lParam=0x1020e) returned 0x1100059 [0077.997] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14d598 | out: lpwndpl=0x14d598) returned 1 [0077.997] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d4b0 | out: lpRect=0x14d4b0) returned 1 [0077.997] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0077.997] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0077.997] GetSystemMetrics (nIndex=42) returned 0 [0077.997] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d210, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0077.997] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d210) returned 0xc [0077.997] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d298 | out: lpRect=0x14d298) returned 1 [0077.997] GetCurrentObject (hdc=0x4e01024b, type=0x1) returned 0x1b00017 [0077.997] GetCurrentObject (hdc=0x4e01024b, type=0x2) returned 0x1900010 [0077.997] GetCurrentObject (hdc=0x4e01024b, type=0x7) returned 0x6205007f [0077.997] GetCurrentObject (hdc=0x4e01024b, type=0x6) returned 0x18a002e [0077.997] SaveDC (hdc=0x4e01024b) returned 1 [0077.997] GetNearestColor (hdc=0x4e01024b, color=0xa0) returned 0xa0 [0077.997] CreateSolidBrush (color=0xa0) returned 0x72100860 [0077.998] FillRect (hDC=0x4e01024b, lprc=0x14cf88, hbr=0x72100860) returned 1 [0077.998] DeleteObject (ho=0x72100860) returned 1 [0077.998] RestoreDC (hdc=0x4e01024b, nSavedDC=-1) returned 1 [0077.998] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0077.998] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0077.998] GetSystemMetrics (nIndex=42) returned 0 [0077.998] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d140, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0077.998] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d140) returned 0xc [0077.998] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d1c8 | out: lpRect=0x14d1c8) returned 1 [0077.998] GetCurrentObject (hdc=0x4e01024b, type=0x1) returned 0x1b00017 [0077.998] GetCurrentObject (hdc=0x4e01024b, type=0x2) returned 0x1900010 [0077.998] GetCurrentObject (hdc=0x4e01024b, type=0x7) returned 0x6205007f [0077.998] GetCurrentObject (hdc=0x4e01024b, type=0x6) returned 0x18a002e [0077.998] SaveDC (hdc=0x4e01024b) returned 1 [0077.998] GetNearestColor (hdc=0x4e01024b, color=0xa0) returned 0xa0 [0077.999] CreateSolidBrush (color=0xa0) returned 0x73100860 [0077.999] FillRect (hDC=0x4e01024b, lprc=0x14ceb8, hbr=0x73100860) returned 1 [0077.999] DeleteObject (ho=0x73100860) returned 1 [0077.999] RestoreDC (hdc=0x4e01024b, nSavedDC=-1) returned 1 [0078.000] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0078.000] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0078.000] GetSystemMetrics (nIndex=42) returned 0 [0078.000] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d140, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0078.000] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d140) returned 0xc [0078.001] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020e, Msg=0x14, wParam=0x5010825, lParam=0x0) returned 0x1 [0078.001] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x138, wParam=0x5010825, lParam=0x1020e) returned 0x1100059 [0078.001] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10210, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0078.002] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x88, wParam=0x4, lParam=0x0) returned 0x0 [0078.002] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0078.002] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0078.002] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0078.002] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0078.003] GetWindowPlacement (in: hWnd=0x10214, lpwndpl=0x14def8 | out: lpwndpl=0x14def8) returned 1 [0078.003] GetClientRect (in: hWnd=0x10214, lpRect=0x14de10 | out: lpRect=0x14de10) returned 1 [0078.003] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0078.003] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0078.003] GetSystemMetrics (nIndex=42) returned 0 [0078.003] GetWindowTextW (in: hWnd=0x10214, lpString=0x14db70, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0078.003] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14db70) returned 0xa [0078.003] GetClientRect (in: hWnd=0x10214, lpRect=0x14dbf8 | out: lpRect=0x14dbf8) returned 1 [0078.003] GetCurrentObject (hdc=0xb010256, type=0x1) returned 0x1b00017 [0078.003] GetCurrentObject (hdc=0xb010256, type=0x2) returned 0x1900010 [0078.003] GetCurrentObject (hdc=0xb010256, type=0x7) returned 0x1050032 [0078.003] GetCurrentObject (hdc=0xb010256, type=0x6) returned 0x18a002e [0078.004] SaveDC (hdc=0xb010256) returned 1 [0078.004] GetNearestColor (hdc=0xb010256, color=0xa0) returned 0xa0 [0078.004] CreateSolidBrush (color=0xa0) returned 0x74100860 [0078.004] FillRect (hDC=0xb010256, lprc=0x14d8e8, hbr=0x74100860) returned 1 [0078.004] DeleteObject (ho=0x74100860) returned 1 [0078.004] RestoreDC (hdc=0xb010256, nSavedDC=-1) returned 1 [0078.004] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x10216, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0078.004] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x10216, Msg=0x14, wParam=0x5010830, lParam=0x0) returned 0x1 [0078.004] GetStockObject (i=5) returned 0x1900015 [0078.005] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x10218, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0078.005] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x10218, Msg=0x14, wParam=0x5010825, lParam=0x0) returned 0x1 [0078.005] GetStockObject (i=5) returned 0x1900015 [0078.005] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021a, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0078.005] SetTextColor (hdc=0x5010830, color=0x0) returned 0x0 [0078.005] SetBkColor (hdc=0x5010830, color=0xffffff) returned 0xffffff [0078.006] GetWindowPlacement (in: hWnd=0x10214, lpwndpl=0x14d598 | out: lpwndpl=0x14d598) returned 1 [0078.006] GetClientRect (in: hWnd=0x10214, lpRect=0x14d4b0 | out: lpRect=0x14d4b0) returned 1 [0078.006] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0078.006] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0078.006] GetSystemMetrics (nIndex=42) returned 0 [0078.006] GetWindowTextW (in: hWnd=0x10214, lpString=0x14d210, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0078.006] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14d210) returned 0xa [0078.006] GetClientRect (in: hWnd=0x10214, lpRect=0x14d298 | out: lpRect=0x14d298) returned 1 [0078.006] GetCurrentObject (hdc=0x2c0108a5, type=0x1) returned 0x1b00017 [0078.006] GetCurrentObject (hdc=0x2c0108a5, type=0x2) returned 0x1900010 [0078.006] GetCurrentObject (hdc=0x2c0108a5, type=0x7) returned 0xfffffffffa05025c [0078.006] GetCurrentObject (hdc=0x2c0108a5, type=0x6) returned 0x18a002e [0078.006] SaveDC (hdc=0x2c0108a5) returned 1 [0078.006] GetNearestColor (hdc=0x2c0108a5, color=0xa0) returned 0xa0 [0078.006] CreateSolidBrush (color=0xa0) returned 0x75100860 [0078.007] FillRect (hDC=0x2c0108a5, lprc=0x14cf88, hbr=0x75100860) returned 1 [0078.007] DeleteObject (ho=0x75100860) returned 1 [0078.007] RestoreDC (hdc=0x2c0108a5, nSavedDC=-1) returned 1 [0078.007] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0078.007] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0078.007] GetSystemMetrics (nIndex=42) returned 0 [0078.007] GetWindowTextW (in: hWnd=0x10214, lpString=0x14d140, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0078.007] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14d140) returned 0xa [0078.007] GetClientRect (in: hWnd=0x10214, lpRect=0x14d1c8 | out: lpRect=0x14d1c8) returned 1 [0078.007] GetCurrentObject (hdc=0x2c0108a5, type=0x1) returned 0x1b00017 [0078.007] GetCurrentObject (hdc=0x2c0108a5, type=0x2) returned 0x1900010 [0078.007] GetCurrentObject (hdc=0x2c0108a5, type=0x7) returned 0xfffffffffa05025c [0078.007] GetCurrentObject (hdc=0x2c0108a5, type=0x6) returned 0x18a002e [0078.008] SaveDC (hdc=0x2c0108a5) returned 1 [0078.008] GetNearestColor (hdc=0x2c0108a5, color=0xa0) returned 0xa0 [0078.008] CreateSolidBrush (color=0xa0) returned 0x76100860 [0078.008] FillRect (hDC=0x2c0108a5, lprc=0x14ceb8, hbr=0x76100860) returned 1 [0078.008] DeleteObject (ho=0x76100860) returned 1 [0078.008] RestoreDC (hdc=0x2c0108a5, nSavedDC=-1) returned 1 [0078.008] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0078.008] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0078.008] GetSystemMetrics (nIndex=42) returned 0 [0078.008] GetWindowTextW (in: hWnd=0x10214, lpString=0x14d140, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0078.008] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14d140) returned 0xa [0078.009] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021a, Msg=0x14, wParam=0x5010830, lParam=0x0) returned 0x1 [0078.009] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x1021c, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0078.009] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x1 [0078.010] SetTextColor (hdc=0x5010830, color=0x0) returned 0x0 [0078.010] SetBkColor (hdc=0x5010830, color=0xffffff) returned 0xffffff [0078.010] GetWindowPlacement (in: hWnd=0x10214, lpwndpl=0x14d598 | out: lpwndpl=0x14d598) returned 1 [0078.010] GetClientRect (in: hWnd=0x10214, lpRect=0x14d4b0 | out: lpRect=0x14d4b0) returned 1 [0078.010] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0078.010] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0078.010] GetSystemMetrics (nIndex=42) returned 0 [0078.010] GetWindowTextW (in: hWnd=0x10214, lpString=0x14d210, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0078.010] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14d210) returned 0xa [0078.010] GetClientRect (in: hWnd=0x10214, lpRect=0x14d298 | out: lpRect=0x14d298) returned 1 [0078.010] GetCurrentObject (hdc=0x2d0108a5, type=0x1) returned 0x1b00017 [0078.010] GetCurrentObject (hdc=0x2d0108a5, type=0x2) returned 0x1900010 [0078.010] GetCurrentObject (hdc=0x2d0108a5, type=0x7) returned 0xfffffffffa05025c [0078.010] GetCurrentObject (hdc=0x2d0108a5, type=0x6) returned 0x18a002e [0078.010] SaveDC (hdc=0x2d0108a5) returned 1 [0078.010] GetNearestColor (hdc=0x2d0108a5, color=0xa0) returned 0xa0 [0078.010] CreateSolidBrush (color=0xa0) returned 0x77100860 [0078.011] FillRect (hDC=0x2d0108a5, lprc=0x14cf88, hbr=0x77100860) returned 1 [0078.011] DeleteObject (ho=0x77100860) returned 1 [0078.011] RestoreDC (hdc=0x2d0108a5, nSavedDC=-1) returned 1 [0078.011] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0078.011] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0078.011] GetSystemMetrics (nIndex=42) returned 0 [0078.011] GetWindowTextW (in: hWnd=0x10214, lpString=0x14d140, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0078.011] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14d140) returned 0xa [0078.011] GetClientRect (in: hWnd=0x10214, lpRect=0x14d1c8 | out: lpRect=0x14d1c8) returned 1 [0078.011] GetCurrentObject (hdc=0x2d0108a5, type=0x1) returned 0x1b00017 [0078.011] GetCurrentObject (hdc=0x2d0108a5, type=0x2) returned 0x1900010 [0078.011] GetCurrentObject (hdc=0x2d0108a5, type=0x7) returned 0xfffffffffa05025c [0078.011] GetCurrentObject (hdc=0x2d0108a5, type=0x6) returned 0x18a002e [0078.011] SaveDC (hdc=0x2d0108a5) returned 1 [0078.011] GetNearestColor (hdc=0x2d0108a5, color=0xa0) returned 0xa0 [0078.011] CreateSolidBrush (color=0xa0) returned 0x78100860 [0078.011] FillRect (hDC=0x2d0108a5, lprc=0x14ceb8, hbr=0x78100860) returned 1 [0078.011] DeleteObject (ho=0x78100860) returned 1 [0078.011] RestoreDC (hdc=0x2d0108a5, nSavedDC=-1) returned 1 [0078.012] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0078.012] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0078.012] GetSystemMetrics (nIndex=42) returned 0 [0078.012] GetWindowTextW (in: hWnd=0x10214, lpString=0x14d140, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0078.012] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14d140) returned 0xa [0078.012] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0x14, wParam=0x5010830, lParam=0x0) returned 0x1 [0078.012] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10220, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0078.013] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0078.013] IsWindowUnicode (hWnd=0x1020c) returned 1 [0078.013] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.013] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0078.013] SetCursor (hCursor=0x10003) returned 0x10003 [0078.013] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.013] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0078.013] GetKeyState (nVirtKey=1) returned 0 [0078.013] GetKeyState (nVirtKey=2) returned 0 [0078.013] GetKeyState (nVirtKey=4) returned 0 [0078.013] GetKeyState (nVirtKey=5) returned 0 [0078.013] GetKeyState (nVirtKey=6) returned 0 [0078.013] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.013] IsWindowUnicode (hWnd=0x401fa) returned 1 [0078.014] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.014] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.014] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0078.014] BeginPaint (in: hWnd=0x401fa, lpPaint=0x14e4e8 | out: lpPaint=0x14e4e8) returned 0x5010830 [0078.014] SelectPalette (hdc=0x5010830, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0078.014] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0078.014] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0078.014] GetSystemMetrics (nIndex=42) returned 0 [0078.014] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14e380, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0078.014] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14e380) returned 0xc [0078.014] SelectPalette (hdc=0x5010830, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0078.014] EndPaint (hWnd=0x401fa, lpPaint=0x14e488) returned 1 [0078.014] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.014] IsWindowUnicode (hWnd=0x301fc) returned 1 [0078.014] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.025] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.025] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0078.025] BeginPaint (in: hWnd=0x301fc, lpPaint=0x14e478 | out: lpPaint=0x14e478) returned 0x5010830 [0078.025] SelectPalette (hdc=0x5010830, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0078.025] CreateCompatibleDC (hdc=0x5010830) returned 0x4701084e [0078.025] SelectObject (hdc=0x4701084e, h=0x29050250) returned 0x185000f [0078.025] GdipCreateFromHDC (hdc=0x4701084e, graphics=0x14e3f8) returned 0x0 [0078.025] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0078.025] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=123, height=23, combineMode=0x0) returned 0x0 [0078.025] GdipCreateMatrix (matrix=0x14e420) returned 0x0 [0078.025] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0078.025] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14e488) returned 0x0 [0078.025] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.025] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0078.025] LocalFree (hMem=0xa931f0) returned 0x0 [0078.026] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0078.026] GdipCreateRegion (region=0x14e420) returned 0x0 [0078.026] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0078.026] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e480) returned 0x0 [0078.026] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e520) returned 0x0 [0078.026] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd700dbd) returned 0x0 [0078.026] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0078.026] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e198) returned 0x0 [0078.026] GetCurrentObject (hdc=0x4701084e, type=0x1) returned 0x1b00017 [0078.026] GetCurrentObject (hdc=0x4701084e, type=0x2) returned 0x1900010 [0078.026] GetCurrentObject (hdc=0x4701084e, type=0x7) returned 0x29050250 [0078.026] GetCurrentObject (hdc=0x4701084e, type=0x6) returned 0x18a002e [0078.026] SaveDC (hdc=0x4701084e) returned 1 [0078.026] GetNearestColor (hdc=0x4701084e, color=0xa0) returned 0xa0 [0078.026] GetNearestColor (hdc=0x4701084e, color=0x35) returned 0x35 [0078.026] GetNearestColor (hdc=0x4701084e, color=0x0) returned 0x0 [0078.026] GetNearestColor (hdc=0x4701084e, color=0x4848e5) returned 0x4848e5 [0078.027] GetNearestColor (hdc=0x4701084e, color=0x0) returned 0x0 [0078.027] GetNearestColor (hdc=0x4701084e, color=0x5151ff) returned 0x5151ff [0078.027] GetNearestColor (hdc=0x4701084e, color=0x4848e5) returned 0x4848e5 [0078.027] GetNearestColor (hdc=0x4701084e, color=0xc0) returned 0xc0 [0078.027] GetNearestColor (hdc=0x4701084e, color=0x0) returned 0x0 [0078.027] RestoreDC (hdc=0x4701084e, nSavedDC=-1) returned 1 [0078.027] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x4701084e) returned 0x0 [0078.027] IsAppThemed () returned 0x1 [0078.027] GetThemeAppProperties () returned 0x3 [0078.027] GetThemeAppProperties () returned 0x3 [0078.027] IsAppThemed () returned 0x1 [0078.027] GetThemeAppProperties () returned 0x3 [0078.027] GetThemeAppProperties () returned 0x3 [0078.027] DrawTextExW (in: hdc=0x8010893, lpchText="Enter Code", cchText=10, lprc=0x14de08, format=0x2415, lpdtp=0x21be450 | out: lpchText="Enter Code", lprc=0x14de08) returned 13 [0078.027] IsAppThemed () returned 0x1 [0078.027] GetThemeAppProperties () returned 0x3 [0078.027] GetThemeAppProperties () returned 0x3 [0078.028] IsAppThemed () returned 0x1 [0078.028] GetThemeAppProperties () returned 0x3 [0078.028] GetThemeAppProperties () returned 0x3 [0078.028] GetFocus () returned 0x0 [0078.028] IsAppThemed () returned 0x1 [0078.028] GetThemeAppProperties () returned 0x3 [0078.028] GetThemeAppProperties () returned 0x3 [0078.028] IsAppThemed () returned 0x1 [0078.028] GetThemeAppProperties () returned 0x3 [0078.028] GetThemeAppProperties () returned 0x3 [0078.028] IsThemePartDefined () returned 0x1 [0078.028] IsAppThemed () returned 0x1 [0078.028] GetThemeAppProperties () returned 0x3 [0078.028] GetThemeAppProperties () returned 0x3 [0078.028] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0078.028] IsAppThemed () returned 0x1 [0078.028] GetThemeAppProperties () returned 0x3 [0078.028] GetThemeAppProperties () returned 0x3 [0078.028] IsAppThemed () returned 0x1 [0078.028] GetThemeAppProperties () returned 0x3 [0078.028] GetThemeAppProperties () returned 0x3 [0078.028] IsThemePartDefined () returned 0x1 [0078.028] GdipCreateRegion (region=0x14df00) returned 0x0 [0078.028] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0078.028] GdipCreateMatrix (matrix=0x14df00) returned 0x0 [0078.028] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0078.028] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14df68) returned 0x0 [0078.028] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.028] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0078.029] LocalFree (hMem=0xa931f0) returned 0x0 [0078.029] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.029] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0078.029] LocalFree (hMem=0xa931f0) returned 0x0 [0078.029] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0078.029] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14dfd0) returned 0x0 [0078.029] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df90) returned 0x0 [0078.029] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df90) returned 0x0 [0078.029] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0078.029] GdipGetDC (graphics=0x1afd81d0, hdc=0x14dfd8) returned 0x0 [0078.029] GetCurrentObject (hdc=0x4701084e, type=0x1) returned 0x1b00017 [0078.029] GetCurrentObject (hdc=0x4701084e, type=0x2) returned 0x1900010 [0078.029] GetCurrentObject (hdc=0x4701084e, type=0x7) returned 0x29050250 [0078.029] GetCurrentObject (hdc=0x4701084e, type=0x6) returned 0x18a002e [0078.029] SaveDC (hdc=0x4701084e) returned 1 [0078.029] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x76040872 [0078.029] GetClipRgn (hdc=0x4701084e, hrgn=0x76040872) returned 0 [0078.029] SelectClipRgn (hdc=0x4701084e, hrgn=0x6d04086f) returned 2 [0078.030] DeleteObject (ho=0x76040872) returned 1 [0078.030] DeleteObject (ho=0x6d04086f) returned 1 [0078.030] OffsetViewportOrgEx (in: hdc=0x4701084e, x=0, y=0, lppt=0x21bee38 | out: lppt=0x21bee38) returned 1 [0078.030] DrawThemeParentBackground () returned 0x0 [0078.030] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14db88 | out: lpwndpl=0x14db88) returned 1 [0078.030] GetClientRect (in: hWnd=0x401fa, lpRect=0x14daa0 | out: lpRect=0x14daa0) returned 1 [0078.030] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0078.034] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0078.034] GetSystemMetrics (nIndex=42) returned 0 [0078.034] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d800, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0078.034] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d800) returned 0xc [0078.034] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d888 | out: lpRect=0x14d888) returned 1 [0078.034] GetCurrentObject (hdc=0x4701084e, type=0x1) returned 0x1b00017 [0078.034] GetCurrentObject (hdc=0x4701084e, type=0x2) returned 0x1900010 [0078.034] GetCurrentObject (hdc=0x4701084e, type=0x7) returned 0x29050250 [0078.034] GetCurrentObject (hdc=0x4701084e, type=0x6) returned 0x18a002e [0078.034] SaveDC (hdc=0x4701084e) returned 2 [0078.034] GetNearestColor (hdc=0x4701084e, color=0xa0) returned 0xa0 [0078.034] CreateSolidBrush (color=0xa0) returned 0x79100860 [0078.035] FillRect (hDC=0x4701084e, lprc=0x14d578, hbr=0x79100860) returned 1 [0078.035] DeleteObject (ho=0x79100860) returned 1 [0078.035] RestoreDC (hdc=0x4701084e, nSavedDC=-1) returned 1 [0078.035] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0078.035] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0078.035] GetSystemMetrics (nIndex=42) returned 0 [0078.035] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0078.035] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0078.035] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d7b8 | out: lpRect=0x14d7b8) returned 1 [0078.035] GetCurrentObject (hdc=0x4701084e, type=0x1) returned 0x1b00017 [0078.035] GetCurrentObject (hdc=0x4701084e, type=0x2) returned 0x1900010 [0078.035] GetCurrentObject (hdc=0x4701084e, type=0x7) returned 0x29050250 [0078.035] GetCurrentObject (hdc=0x4701084e, type=0x6) returned 0x18a002e [0078.035] SaveDC (hdc=0x4701084e) returned 2 [0078.035] GetNearestColor (hdc=0x4701084e, color=0xa0) returned 0xa0 [0078.035] CreateSolidBrush (color=0xa0) returned 0x7a100860 [0078.035] FillRect (hDC=0x4701084e, lprc=0x14d4a8, hbr=0x7a100860) returned 1 [0078.035] DeleteObject (ho=0x7a100860) returned 1 [0078.035] RestoreDC (hdc=0x4701084e, nSavedDC=-1) returned 1 [0078.035] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0078.036] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0078.036] GetSystemMetrics (nIndex=42) returned 0 [0078.036] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0078.036] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0078.036] RestoreDC (hdc=0x4701084e, nSavedDC=-1) returned 1 [0078.036] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x4701084e) returned 0x0 [0078.036] IsAppThemed () returned 0x1 [0078.036] GetThemeAppProperties () returned 0x3 [0078.036] GetThemeAppProperties () returned 0x3 [0078.036] IsAppThemed () returned 0x1 [0078.036] GetThemeAppProperties () returned 0x3 [0078.036] GetThemeAppProperties () returned 0x3 [0078.036] IsThemePartDefined () returned 0x1 [0078.036] GdipCreateRegion (region=0x14dea0) returned 0x0 [0078.036] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0078.036] GdipCreateMatrix (matrix=0x14dea0) returned 0x0 [0078.036] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0078.036] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14df08) returned 0x0 [0078.036] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.036] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0078.036] LocalFree (hMem=0xa931f0) returned 0x0 [0078.036] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.036] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0078.037] LocalFree (hMem=0xa931f0) returned 0x0 [0078.037] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0078.037] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df70) returned 0x0 [0078.037] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df30) returned 0x0 [0078.037] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df30) returned 0x0 [0078.037] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0078.037] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df78) returned 0x0 [0078.037] GetCurrentObject (hdc=0x4701084e, type=0x1) returned 0x1b00017 [0078.037] GetCurrentObject (hdc=0x4701084e, type=0x2) returned 0x1900010 [0078.037] GetCurrentObject (hdc=0x4701084e, type=0x7) returned 0x29050250 [0078.037] GetCurrentObject (hdc=0x4701084e, type=0x6) returned 0x18a002e [0078.037] SaveDC (hdc=0x4701084e) returned 1 [0078.037] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x6e04086f [0078.037] GetClipRgn (hdc=0x4701084e, hrgn=0x6e04086f) returned 0 [0078.037] SelectClipRgn (hdc=0x4701084e, hrgn=0x78040872) returned 2 [0078.037] DeleteObject (ho=0x6e04086f) returned 1 [0078.037] DeleteObject (ho=0x78040872) returned 1 [0078.037] OffsetViewportOrgEx (in: hdc=0x4701084e, x=0, y=0, lppt=0x21bfc40 | out: lppt=0x21bfc40) returned 1 [0078.037] IsAppThemed () returned 0x1 [0078.037] GetThemeAppProperties () returned 0x3 [0078.037] GetThemeAppProperties () returned 0x3 [0078.037] DrawThemeBackground () returned 0x0 [0078.038] RestoreDC (hdc=0x4701084e, nSavedDC=-1) returned 1 [0078.038] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x4701084e) returned 0x0 [0078.038] GdipCreateRegion (region=0x14de90) returned 0x0 [0078.038] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0078.038] GdipCreateMatrix (matrix=0x14de90) returned 0x0 [0078.038] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0078.038] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14def8) returned 0x0 [0078.038] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.038] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0078.038] LocalFree (hMem=0xa931f0) returned 0x0 [0078.038] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.038] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0078.038] LocalFree (hMem=0xa931f0) returned 0x0 [0078.038] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0078.038] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df60) returned 0x0 [0078.038] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df20) returned 0x0 [0078.038] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df20) returned 0x0 [0078.038] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0078.038] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df68) returned 0x0 [0078.038] GetCurrentObject (hdc=0x4701084e, type=0x1) returned 0x1b00017 [0078.038] GetCurrentObject (hdc=0x4701084e, type=0x2) returned 0x1900010 [0078.038] GetCurrentObject (hdc=0x4701084e, type=0x7) returned 0x29050250 [0078.038] GetCurrentObject (hdc=0x4701084e, type=0x6) returned 0x18a002e [0078.039] SaveDC (hdc=0x4701084e) returned 1 [0078.039] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x79040872 [0078.039] GetClipRgn (hdc=0x4701084e, hrgn=0x79040872) returned 0 [0078.039] SelectClipRgn (hdc=0x4701084e, hrgn=0x6f04086f) returned 2 [0078.039] DeleteObject (ho=0x79040872) returned 1 [0078.039] DeleteObject (ho=0x6f04086f) returned 1 [0078.039] OffsetViewportOrgEx (in: hdc=0x4701084e, x=0, y=0, lppt=0x21c0118 | out: lppt=0x21c0118) returned 1 [0078.039] IsAppThemed () returned 0x1 [0078.039] GetThemeAppProperties () returned 0x3 [0078.039] GetThemeAppProperties () returned 0x3 [0078.039] GetThemeBackgroundContentRect () returned 0x0 [0078.039] RestoreDC (hdc=0x4701084e, nSavedDC=-1) returned 1 [0078.039] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x4701084e) returned 0x0 [0078.039] IsAppThemed () returned 0x1 [0078.039] GetThemeAppProperties () returned 0x3 [0078.039] GetThemeAppProperties () returned 0x3 [0078.039] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e148) returned 0x0 [0078.039] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e128) returned 0x0 [0078.039] GetCurrentObject (hdc=0x4701084e, type=0x1) returned 0x1b00017 [0078.039] GetCurrentObject (hdc=0x4701084e, type=0x2) returned 0x1900010 [0078.039] GetCurrentObject (hdc=0x4701084e, type=0x7) returned 0x29050250 [0078.039] GetCurrentObject (hdc=0x4701084e, type=0x6) returned 0x18a002e [0078.040] SaveDC (hdc=0x4701084e) returned 1 [0078.040] GetTextAlign (hdc=0x4701084e) returned 0x0 [0078.040] GetTextColor (hdc=0x4701084e) returned 0x0 [0078.040] GetCurrentObject (hdc=0x4701084e, type=0x6) returned 0x18a002e [0078.040] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dc60 | out: pv=0x14dc60) returned 92 [0078.040] SelectObject (hdc=0x4701084e, h=0x120a086d) returned 0x18a002e [0078.040] GetBkMode (hdc=0x4701084e) returned 2 [0078.040] SetBkMode (hdc=0x4701084e, mode=1) returned 2 [0078.040] DrawTextExW (in: hdc=0x4701084e, lpchText="Enter Code", cchText=10, lprc=0x14dea0, format=0x2415, lpdtp=0x21c06f8 | out: lpchText="Enter Code", lprc=0x14dea0) returned 13 [0078.040] DrawTextExW (in: hdc=0x4701084e, lpchText="Enter Code", cchText=10, lprc=0x14e0b8, format=0x2015, lpdtp=0x21c06f8 | out: lpchText="Enter Code", lprc=0x14e0b8) returned 13 [0078.040] RestoreDC (hdc=0x4701084e, nSavedDC=-1) returned 1 [0078.040] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x4701084e) returned 0x0 [0078.040] GetFocus () returned 0x0 [0078.040] IsAppThemed () returned 0x1 [0078.040] GetThemeAppProperties () returned 0x3 [0078.040] GetThemeAppProperties () returned 0x3 [0078.041] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e438) returned 0x0 [0078.041] BitBlt (hdc=0x5010830, x=0, y=0, cx=123, cy=23, hdcSrc=0x4701084e, x1=0, y1=0, rop=0xcc0020) returned 1 [0078.041] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x4701084e) returned 0x0 [0078.041] SelectPalette (hdc=0x5010830, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0078.041] SelectObject (hdc=0x4701084e, h=0x185000f) returned 0x29050250 [0078.041] DeleteDC (hdc=0x4701084e) returned 1 [0078.041] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0078.041] EndPaint (hWnd=0x301fc, lpPaint=0x14e418) returned 1 [0078.041] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.041] IsWindowUnicode (hWnd=0x201da) returned 1 [0078.041] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.041] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.041] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0078.041] BeginPaint (in: hWnd=0x201da, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0x5010830 [0078.041] SelectPalette (hdc=0x5010830, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0078.041] CreateCompatibleDC (hdc=0x5010830) returned 0x4901084e [0078.041] SelectObject (hdc=0x4901084e, h=0x29050250) returned 0x185000f [0078.041] GdipCreateFromHDC (hdc=0x4901084e, graphics=0x14e428) returned 0x0 [0078.041] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0078.042] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=40, height=20, combineMode=0x0) returned 0x0 [0078.042] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0078.042] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0078.042] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14e4b8) returned 0x0 [0078.042] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.042] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0078.042] LocalFree (hMem=0xa931f0) returned 0x0 [0078.042] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0078.042] GdipCreateRegion (region=0x14e450) returned 0x0 [0078.042] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0078.042] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0078.042] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0078.042] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0078.042] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0078.042] GetSystemMetrics (nIndex=42) returned 0 [0078.042] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:51") returned 4 [0078.042] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0078.042] GetClientRect (in: hWnd=0x201da, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0078.042] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0078.043] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0078.043] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0078.043] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0078.043] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0078.043] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.043] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0078.043] LocalFree (hMem=0xa931f0) returned 0x0 [0078.043] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0078.043] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.043] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0078.043] LocalFree (hMem=0xa931f0) returned 0x0 [0078.043] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0078.043] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0078.043] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0078.043] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0078.043] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0078.043] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0078.043] GetCurrentObject (hdc=0x4901084e, type=0x1) returned 0x1b00017 [0078.044] GetCurrentObject (hdc=0x4901084e, type=0x2) returned 0x1900010 [0078.044] GetCurrentObject (hdc=0x4901084e, type=0x7) returned 0x29050250 [0078.044] GetCurrentObject (hdc=0x4901084e, type=0x6) returned 0x18a002e [0078.044] SaveDC (hdc=0x4901084e) returned 1 [0078.044] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7004086f [0078.044] GetClipRgn (hdc=0x4901084e, hrgn=0x7004086f) returned 0 [0078.044] SelectClipRgn (hdc=0x4901084e, hrgn=0x7c040872) returned 2 [0078.044] DeleteObject (ho=0x7004086f) returned 1 [0078.044] DeleteObject (ho=0x7c040872) returned 1 [0078.044] OffsetViewportOrgEx (in: hdc=0x4901084e, x=0, y=0, lppt=0x21c0e10 | out: lppt=0x21c0e10) returned 1 [0078.044] GetNearestColor (hdc=0x4901084e, color=0xa0) returned 0xa0 [0078.044] CreateSolidBrush (color=0xa0) returned 0x7b100860 [0078.044] FillRect (hDC=0x4901084e, lprc=0x14e1e8, hbr=0x7b100860) returned 1 [0078.044] DeleteObject (ho=0x7b100860) returned 1 [0078.044] RestoreDC (hdc=0x4901084e, nSavedDC=-1) returned 1 [0078.044] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x4901084e) returned 0x0 [0078.044] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd6e0dbd) returned 0x0 [0078.045] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0078.045] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0078.045] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0078.045] GetSystemMetrics (nIndex=42) returned 0 [0078.045] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:51") returned 4 [0078.045] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0078.045] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0078.045] GetCurrentObject (hdc=0x4901084e, type=0x1) returned 0x1b00017 [0078.045] GetCurrentObject (hdc=0x4901084e, type=0x2) returned 0x1900010 [0078.045] GetCurrentObject (hdc=0x4901084e, type=0x7) returned 0x29050250 [0078.045] GetCurrentObject (hdc=0x4901084e, type=0x6) returned 0x18a002e [0078.045] SaveDC (hdc=0x4901084e) returned 1 [0078.045] GetNearestColor (hdc=0x4901084e, color=0xffffff) returned 0xffffff [0078.045] RestoreDC (hdc=0x4901084e, nSavedDC=-1) returned 1 [0078.045] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x4901084e) returned 0x0 [0078.046] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0078.046] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0078.046] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0078.046] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0078.046] GetCurrentObject (hdc=0x4901084e, type=0x1) returned 0x1b00017 [0078.047] GetCurrentObject (hdc=0x4901084e, type=0x2) returned 0x1900010 [0078.047] GetCurrentObject (hdc=0x4901084e, type=0x7) returned 0x29050250 [0078.047] GetCurrentObject (hdc=0x4901084e, type=0x6) returned 0x18a002e [0078.047] SaveDC (hdc=0x4901084e) returned 1 [0078.047] GetTextAlign (hdc=0x4901084e) returned 0x0 [0078.047] GetTextColor (hdc=0x4901084e) returned 0x0 [0078.047] SetTextColor (hdc=0x4901084e, color=0xffffff) returned 0x0 [0078.047] GetCurrentObject (hdc=0x4901084e, type=0x6) returned 0x18a002e [0078.047] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0078.047] SelectObject (hdc=0x4901084e, h=0x200a0899) returned 0x18a002e [0078.047] GetBkMode (hdc=0x4901084e) returned 2 [0078.047] SetBkMode (hdc=0x4901084e, mode=1) returned 2 [0078.047] DrawTextExW (in: hdc=0x4901084e, lpchText="4:51", cchText=4, lprc=0x14e1c8, format=0x0, lpdtp=0x21c16a0 | out: lpchText="4:51", lprc=0x14e1c8) returned 20 [0078.047] RestoreDC (hdc=0x4901084e, nSavedDC=-1) returned 1 [0078.047] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x4901084e) returned 0x0 [0078.048] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0078.048] BitBlt (hdc=0x5010830, x=0, y=0, cx=40, cy=20, hdcSrc=0x4901084e, x1=0, y1=0, rop=0xcc0020) returned 1 [0078.048] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x4901084e) returned 0x0 [0078.048] SelectPalette (hdc=0x5010830, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0078.048] SelectObject (hdc=0x4901084e, h=0x185000f) returned 0x29050250 [0078.048] DeleteDC (hdc=0x4901084e) returned 1 [0078.048] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0078.048] EndPaint (hWnd=0x201da, lpPaint=0x14e448) returned 1 [0078.048] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.048] IsWindowUnicode (hWnd=0x201dc) returned 1 [0078.048] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.048] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.048] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0078.048] BeginPaint (in: hWnd=0x201dc, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0x5010830 [0078.048] SelectPalette (hdc=0x5010830, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0078.048] CreateCompatibleDC (hdc=0x5010830) returned 0x4b01084e [0078.048] SelectObject (hdc=0x4b01084e, h=0x29050250) returned 0x185000f [0078.049] GdipCreateFromHDC (hdc=0x4b01084e, graphics=0x14e428) returned 0x0 [0078.049] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0078.049] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=144, height=13, combineMode=0x0) returned 0x0 [0078.049] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0078.049] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0078.049] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14e4b8) returned 0x0 [0078.049] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.049] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0078.049] LocalFree (hMem=0xa931f0) returned 0x0 [0078.049] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0078.049] GdipCreateRegion (region=0x14e450) returned 0x0 [0078.049] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0078.049] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0078.049] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0078.049] GetWindowTextLengthW (hWnd=0x201dc) returned 29 [0078.049] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201dc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1d [0078.049] GetSystemMetrics (nIndex=42) returned 0 [0078.049] GetWindowTextW (in: hWnd=0x201dc, lpString=0x14e320, nMaxCount=30 | out: lpString="Your Files Will Be Deleted on") returned 29 [0078.049] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201dc, Msg=0xd, wParam=0x1e, lParam=0x14e320) returned 0x1d [0078.049] GetClientRect (in: hWnd=0x201dc, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0078.049] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0078.050] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0078.050] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0078.050] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0078.050] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0078.050] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.050] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0078.050] LocalFree (hMem=0xa931f0) returned 0x0 [0078.050] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0078.050] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.050] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0078.050] LocalFree (hMem=0xa931f0) returned 0x0 [0078.050] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0078.050] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0078.050] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0078.050] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0078.050] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0078.050] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0078.050] GetCurrentObject (hdc=0x4b01084e, type=0x1) returned 0x1b00017 [0078.051] GetCurrentObject (hdc=0x4b01084e, type=0x2) returned 0x1900010 [0078.051] GetCurrentObject (hdc=0x4b01084e, type=0x7) returned 0x29050250 [0078.051] GetCurrentObject (hdc=0x4b01084e, type=0x6) returned 0x18a002e [0078.051] SaveDC (hdc=0x4b01084e) returned 1 [0078.051] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7d040872 [0078.051] GetClipRgn (hdc=0x4b01084e, hrgn=0x7d040872) returned 0 [0078.051] SelectClipRgn (hdc=0x4b01084e, hrgn=0x7204086f) returned 2 [0078.051] DeleteObject (ho=0x7d040872) returned 1 [0078.051] DeleteObject (ho=0x7204086f) returned 1 [0078.051] OffsetViewportOrgEx (in: hdc=0x4b01084e, x=0, y=0, lppt=0x21c1d48 | out: lppt=0x21c1d48) returned 1 [0078.051] GetNearestColor (hdc=0x4b01084e, color=0xa0) returned 0xa0 [0078.051] CreateSolidBrush (color=0xa0) returned 0x7c100860 [0078.051] FillRect (hDC=0x4b01084e, lprc=0x14e1e8, hbr=0x7c100860) returned 1 [0078.051] DeleteObject (ho=0x7c100860) returned 1 [0078.051] RestoreDC (hdc=0x4b01084e, nSavedDC=-1) returned 1 [0078.051] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x4b01084e) returned 0x0 [0078.051] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd6c0dbd) returned 0x0 [0078.052] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0078.052] GetWindowTextLengthW (hWnd=0x201dc) returned 29 [0078.052] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201dc, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x1d [0078.052] GetSystemMetrics (nIndex=42) returned 0 [0078.052] GetWindowTextW (in: hWnd=0x201dc, lpString=0x14e320, nMaxCount=30 | out: lpString="Your Files Will Be Deleted on") returned 29 [0078.052] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201dc, Msg=0xd, wParam=0x1e, lParam=0x14e320) returned 0x1d [0078.052] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0078.052] GetCurrentObject (hdc=0x4b01084e, type=0x1) returned 0x1b00017 [0078.052] GetCurrentObject (hdc=0x4b01084e, type=0x2) returned 0x1900010 [0078.052] GetCurrentObject (hdc=0x4b01084e, type=0x7) returned 0x29050250 [0078.052] GetCurrentObject (hdc=0x4b01084e, type=0x6) returned 0x18a002e [0078.052] SaveDC (hdc=0x4b01084e) returned 1 [0078.052] GetNearestColor (hdc=0x4b01084e, color=0xffffff) returned 0xffffff [0078.052] RestoreDC (hdc=0x4b01084e, nSavedDC=-1) returned 1 [0078.052] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x4b01084e) returned 0x0 [0078.052] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0078.052] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0078.052] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0078.053] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0078.053] GetCurrentObject (hdc=0x4b01084e, type=0x1) returned 0x1b00017 [0078.053] GetCurrentObject (hdc=0x4b01084e, type=0x2) returned 0x1900010 [0078.053] GetCurrentObject (hdc=0x4b01084e, type=0x7) returned 0x29050250 [0078.053] GetCurrentObject (hdc=0x4b01084e, type=0x6) returned 0x18a002e [0078.053] SaveDC (hdc=0x4b01084e) returned 1 [0078.053] GetTextAlign (hdc=0x4b01084e) returned 0x0 [0078.053] GetTextColor (hdc=0x4b01084e) returned 0x0 [0078.053] SetTextColor (hdc=0x4b01084e, color=0xffffff) returned 0x0 [0078.053] GetCurrentObject (hdc=0x4b01084e, type=0x6) returned 0x18a002e [0078.053] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0078.053] SelectObject (hdc=0x4b01084e, h=0xffffffffc80a01db) returned 0x18a002e [0078.053] GetBkMode (hdc=0x4b01084e) returned 2 [0078.053] SetBkMode (hdc=0x4b01084e, mode=1) returned 2 [0078.053] DrawTextExW (in: hdc=0x4b01084e, lpchText="Your Files Will Be Deleted on", cchText=29, lprc=0x14e1c8, format=0x0, lpdtp=0x21c2668 | out: lpchText="Your Files Will Be Deleted on", lprc=0x14e1c8) returned 13 [0078.053] RestoreDC (hdc=0x4b01084e, nSavedDC=-1) returned 1 [0078.054] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x4b01084e) returned 0x0 [0078.054] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0078.054] BitBlt (hdc=0x5010830, x=0, y=0, cx=144, cy=13, hdcSrc=0x4b01084e, x1=0, y1=0, rop=0xcc0020) returned 1 [0078.054] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x4b01084e) returned 0x0 [0078.054] SelectPalette (hdc=0x5010830, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0078.054] SelectObject (hdc=0x4b01084e, h=0x185000f) returned 0x29050250 [0078.054] DeleteDC (hdc=0x4b01084e) returned 1 [0078.054] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0078.054] EndPaint (hWnd=0x201dc, lpPaint=0x14e448) returned 1 [0078.054] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.054] IsWindowUnicode (hWnd=0x10206) returned 1 [0078.054] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.054] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.054] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0078.054] BeginPaint (in: hWnd=0x10206, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0xb010256 [0078.054] SelectPalette (hdc=0xb010256, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0078.054] CreateCompatibleDC (hdc=0xb010256) returned 0x4d01084e [0078.054] SelectObject (hdc=0x4d01084e, h=0x29050250) returned 0x185000f [0078.054] GdipCreateFromHDC (hdc=0x4d01084e, graphics=0x14e428) returned 0x0 [0078.055] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0078.055] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=55, height=26, combineMode=0x0) returned 0x0 [0078.055] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0078.055] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0078.055] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14e4b8) returned 0x0 [0078.055] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.055] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0078.055] LocalFree (hMem=0xa931f0) returned 0x0 [0078.055] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0078.055] GdipCreateRegion (region=0x14e450) returned 0x0 [0078.055] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0078.055] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0078.055] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0078.055] GetWindowTextLengthW (hWnd=0x10206) returned 20 [0078.055] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10206, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x14 [0078.055] GetSystemMetrics (nIndex=42) returned 0 [0078.055] GetWindowTextW (in: hWnd=0x10206, lpString=0x14e330, nMaxCount=21 | out: lpString="208 Files\r\nEncrypted") returned 20 [0078.055] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10206, Msg=0xd, wParam=0x15, lParam=0x14e330) returned 0x14 [0078.055] GetClientRect (in: hWnd=0x10206, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0078.055] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0078.055] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0078.055] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0078.055] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0078.056] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0078.056] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.056] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0078.056] LocalFree (hMem=0xa931f0) returned 0x0 [0078.056] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0078.056] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.056] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0078.056] LocalFree (hMem=0xa931f0) returned 0x0 [0078.056] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0078.056] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0078.056] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0078.056] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0078.056] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0078.056] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0078.056] GetCurrentObject (hdc=0x4d01084e, type=0x1) returned 0x1b00017 [0078.056] GetCurrentObject (hdc=0x4d01084e, type=0x2) returned 0x1900010 [0078.056] GetCurrentObject (hdc=0x4d01084e, type=0x7) returned 0x29050250 [0078.056] GetCurrentObject (hdc=0x4d01084e, type=0x6) returned 0x18a002e [0078.056] SaveDC (hdc=0x4d01084e) returned 1 [0078.056] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7304086f [0078.056] GetClipRgn (hdc=0x4d01084e, hrgn=0x7304086f) returned 0 [0078.057] SelectClipRgn (hdc=0x4d01084e, hrgn=0x7f040872) returned 2 [0078.057] DeleteObject (ho=0x7304086f) returned 1 [0078.057] DeleteObject (ho=0x7f040872) returned 1 [0078.057] OffsetViewportOrgEx (in: hdc=0x4d01084e, x=0, y=0, lppt=0x21c2ce0 | out: lppt=0x21c2ce0) returned 1 [0078.057] GetNearestColor (hdc=0x4d01084e, color=0xa0) returned 0xa0 [0078.057] CreateSolidBrush (color=0xa0) returned 0x7d100860 [0078.057] FillRect (hDC=0x4d01084e, lprc=0x14e1e8, hbr=0x7d100860) returned 1 [0078.057] DeleteObject (ho=0x7d100860) returned 1 [0078.057] RestoreDC (hdc=0x4d01084e, nSavedDC=-1) returned 1 [0078.057] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x4d01084e) returned 0x0 [0078.057] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd6a0dbd) returned 0x0 [0078.057] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0078.057] GetWindowTextLengthW (hWnd=0x10206) returned 20 [0078.057] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10206, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x14 [0078.057] GetSystemMetrics (nIndex=42) returned 0 [0078.057] GetWindowTextW (in: hWnd=0x10206, lpString=0x14e330, nMaxCount=21 | out: lpString="208 Files\r\nEncrypted") returned 20 [0078.057] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10206, Msg=0xd, wParam=0x15, lParam=0x14e330) returned 0x14 [0078.057] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0078.057] GetCurrentObject (hdc=0x4d01084e, type=0x1) returned 0x1b00017 [0078.057] GetCurrentObject (hdc=0x4d01084e, type=0x2) returned 0x1900010 [0078.057] GetCurrentObject (hdc=0x4d01084e, type=0x7) returned 0x29050250 [0078.057] GetCurrentObject (hdc=0x4d01084e, type=0x6) returned 0x18a002e [0078.058] SaveDC (hdc=0x4d01084e) returned 1 [0078.058] GetNearestColor (hdc=0x4d01084e, color=0xffffff) returned 0xffffff [0078.058] RestoreDC (hdc=0x4d01084e, nSavedDC=-1) returned 1 [0078.058] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x4d01084e) returned 0x0 [0078.058] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0078.058] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0078.058] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0078.058] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0078.058] GetCurrentObject (hdc=0x4d01084e, type=0x1) returned 0x1b00017 [0078.058] GetCurrentObject (hdc=0x4d01084e, type=0x2) returned 0x1900010 [0078.058] GetCurrentObject (hdc=0x4d01084e, type=0x7) returned 0x29050250 [0078.058] GetCurrentObject (hdc=0x4d01084e, type=0x6) returned 0x18a002e [0078.058] SaveDC (hdc=0x4d01084e) returned 1 [0078.058] GetTextAlign (hdc=0x4d01084e) returned 0x0 [0078.058] GetTextColor (hdc=0x4d01084e) returned 0x0 [0078.059] SetTextColor (hdc=0x4d01084e, color=0xffffff) returned 0x0 [0078.059] GetCurrentObject (hdc=0x4d01084e, type=0x6) returned 0x18a002e [0078.059] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0078.059] SelectObject (hdc=0x4d01084e, h=0xb0a087e) returned 0x18a002e [0078.059] GetBkMode (hdc=0x4d01084e) returned 2 [0078.059] SetBkMode (hdc=0x4d01084e, mode=1) returned 2 [0078.059] DrawTextExW (in: hdc=0x4d01084e, lpchText="208 Files\r\nEncrypted", cchText=20, lprc=0x14e1c8, format=0x0, lpdtp=0x21c35d0 | out: lpchText="208 Files\r\nEncrypted", lprc=0x14e1c8) returned 26 [0078.059] RestoreDC (hdc=0x4d01084e, nSavedDC=-1) returned 1 [0078.059] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x4d01084e) returned 0x0 [0078.059] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0078.059] BitBlt (hdc=0xb010256, x=0, y=0, cx=55, cy=26, hdcSrc=0x4d01084e, x1=0, y1=0, rop=0xcc0020) returned 1 [0078.059] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x4d01084e) returned 0x0 [0078.059] SelectPalette (hdc=0xb010256, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0078.060] SelectObject (hdc=0x4d01084e, h=0x185000f) returned 0x29050250 [0078.060] DeleteDC (hdc=0x4d01084e) returned 1 [0078.060] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0078.060] EndPaint (hWnd=0x10206, lpPaint=0x14e448) returned 1 [0078.060] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.060] IsWindowUnicode (hWnd=0x10208) returned 1 [0078.060] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.060] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.060] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0078.060] BeginPaint (in: hWnd=0x10208, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0x5010825 [0078.060] SelectPalette (hdc=0x5010825, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0078.060] CreateCompatibleDC (hdc=0x5010825) returned 0x4f01084e [0078.060] SelectObject (hdc=0x4f01084e, h=0x29050250) returned 0x185000f [0078.060] GdipCreateFromHDC (hdc=0x4f01084e, graphics=0x14e428) returned 0x0 [0078.060] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0078.060] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=87, height=15, combineMode=0x0) returned 0x0 [0078.061] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0078.061] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0078.061] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14e4b8) returned 0x0 [0078.061] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.061] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0078.061] LocalFree (hMem=0xa931f0) returned 0x0 [0078.061] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0078.061] GdipCreateRegion (region=0x14e450) returned 0x0 [0078.061] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0078.061] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0078.061] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0078.061] GetWindowTextLengthW (hWnd=0x10208) returned 16 [0078.061] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10208, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10 [0078.062] GetSystemMetrics (nIndex=42) returned 0 [0078.062] GetWindowTextW (in: hWnd=0x10208, lpString=0x14e330, nMaxCount=17 | out: lpString="Bitcoin Address:") returned 16 [0078.062] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10208, Msg=0xd, wParam=0x11, lParam=0x14e330) returned 0x10 [0078.062] GetClientRect (in: hWnd=0x10208, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0078.062] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0078.062] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0078.062] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0078.062] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0078.062] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0078.062] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.062] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0078.062] LocalFree (hMem=0xa931f0) returned 0x0 [0078.063] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0078.063] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.063] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0078.063] LocalFree (hMem=0xa931f0) returned 0x0 [0078.063] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0078.063] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0078.063] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0078.063] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0078.063] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0078.063] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0078.063] GetCurrentObject (hdc=0x4f01084e, type=0x1) returned 0x1b00017 [0078.063] GetCurrentObject (hdc=0x4f01084e, type=0x2) returned 0x1900010 [0078.063] GetCurrentObject (hdc=0x4f01084e, type=0x7) returned 0x29050250 [0078.063] GetCurrentObject (hdc=0x4f01084e, type=0x6) returned 0x18a002e [0078.063] SaveDC (hdc=0x4f01084e) returned 1 [0078.063] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff80040872 [0078.063] GetClipRgn (hdc=0x4f01084e, hrgn=0xffffffff80040872) returned 0 [0078.063] SelectClipRgn (hdc=0x4f01084e, hrgn=0x7504086f) returned 2 [0078.064] DeleteObject (ho=0xffffffff80040872) returned 1 [0078.064] DeleteObject (ho=0x7504086f) returned 1 [0078.064] OffsetViewportOrgEx (in: hdc=0x4f01084e, x=0, y=0, lppt=0x21c3c30 | out: lppt=0x21c3c30) returned 1 [0078.064] GetNearestColor (hdc=0x4f01084e, color=0xa0) returned 0xa0 [0078.064] CreateSolidBrush (color=0xa0) returned 0x7e100860 [0078.064] FillRect (hDC=0x4f01084e, lprc=0x14e1e8, hbr=0x7e100860) returned 1 [0078.064] DeleteObject (ho=0x7e100860) returned 1 [0078.064] RestoreDC (hdc=0x4f01084e, nSavedDC=-1) returned 1 [0078.064] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x4f01084e) returned 0x0 [0078.064] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd680dbd) returned 0x0 [0078.064] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0078.064] GetWindowTextLengthW (hWnd=0x10208) returned 16 [0078.064] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10208, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x10 [0078.064] GetSystemMetrics (nIndex=42) returned 0 [0078.064] GetWindowTextW (in: hWnd=0x10208, lpString=0x14e330, nMaxCount=17 | out: lpString="Bitcoin Address:") returned 16 [0078.064] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10208, Msg=0xd, wParam=0x11, lParam=0x14e330) returned 0x10 [0078.064] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0078.064] GetCurrentObject (hdc=0x4f01084e, type=0x1) returned 0x1b00017 [0078.064] GetCurrentObject (hdc=0x4f01084e, type=0x2) returned 0x1900010 [0078.064] GetCurrentObject (hdc=0x4f01084e, type=0x7) returned 0x29050250 [0078.065] GetCurrentObject (hdc=0x4f01084e, type=0x6) returned 0x18a002e [0078.065] SaveDC (hdc=0x4f01084e) returned 1 [0078.065] GetNearestColor (hdc=0x4f01084e, color=0xffffff) returned 0xffffff [0078.065] RestoreDC (hdc=0x4f01084e, nSavedDC=-1) returned 1 [0078.065] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x4f01084e) returned 0x0 [0078.065] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0078.065] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0078.065] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0078.065] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0078.065] GetCurrentObject (hdc=0x4f01084e, type=0x1) returned 0x1b00017 [0078.065] GetCurrentObject (hdc=0x4f01084e, type=0x2) returned 0x1900010 [0078.065] GetCurrentObject (hdc=0x4f01084e, type=0x7) returned 0x29050250 [0078.065] GetCurrentObject (hdc=0x4f01084e, type=0x6) returned 0x18a002e [0078.065] SaveDC (hdc=0x4f01084e) returned 1 [0078.065] GetTextAlign (hdc=0x4f01084e) returned 0x0 [0078.065] GetTextColor (hdc=0x4f01084e) returned 0x0 [0078.065] SetTextColor (hdc=0x4f01084e, color=0xffffff) returned 0x0 [0078.066] GetCurrentObject (hdc=0x4f01084e, type=0x6) returned 0x18a002e [0078.066] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0078.066] SelectObject (hdc=0x4f01084e, h=0x370a08a3) returned 0x18a002e [0078.066] GetBkMode (hdc=0x4f01084e) returned 2 [0078.066] SetBkMode (hdc=0x4f01084e, mode=1) returned 2 [0078.066] DrawTextExW (in: hdc=0x4f01084e, lpchText="Bitcoin Address:", cchText=16, lprc=0x14e1c8, format=0x0, lpdtp=0x21c4508 | out: lpchText="Bitcoin Address:", lprc=0x14e1c8) returned 15 [0078.066] RestoreDC (hdc=0x4f01084e, nSavedDC=-1) returned 1 [0078.066] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x4f01084e) returned 0x0 [0078.066] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0078.066] BitBlt (hdc=0x5010825, x=0, y=0, cx=87, cy=15, hdcSrc=0x4f01084e, x1=0, y1=0, rop=0xcc0020) returned 1 [0078.066] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x4f01084e) returned 0x0 [0078.066] SelectPalette (hdc=0x5010825, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0078.066] SelectObject (hdc=0x4f01084e, h=0x185000f) returned 0x29050250 [0078.066] DeleteDC (hdc=0x4f01084e) returned 1 [0078.066] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0078.066] EndPaint (hWnd=0x10208, lpPaint=0x14e448) returned 1 [0078.067] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.067] IsWindowUnicode (hWnd=0x1020a) returned 1 [0078.067] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.067] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.067] DispatchMessageW (lpMsg=0x14edb0) returned 0x1 [0078.067] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020a, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0078.067] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x138, wParam=0x2e0108a5, lParam=0x1020a) returned 0x1100059 [0078.067] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.067] IsWindowUnicode (hWnd=0x1020c) returned 1 [0078.067] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.067] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.067] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0078.067] BeginPaint (in: hWnd=0x1020c, lpPaint=0x14e478 | out: lpPaint=0x14e478) returned 0x5010830 [0078.068] SelectPalette (hdc=0x5010830, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0078.068] CreateCompatibleDC (hdc=0x5010830) returned 0x5201084e [0078.068] SelectObject (hdc=0x5201084e, h=0x29050250) returned 0x185000f [0078.068] GdipCreateFromHDC (hdc=0x5201084e, graphics=0x14e3f8) returned 0x0 [0078.068] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0078.068] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=408, height=23, combineMode=0x0) returned 0x0 [0078.068] GdipCreateMatrix (matrix=0x14e420) returned 0x0 [0078.068] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0078.068] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14e488) returned 0x0 [0078.068] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.068] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0078.068] LocalFree (hMem=0xa931f0) returned 0x0 [0078.068] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0078.068] GdipCreateRegion (region=0x14e420) returned 0x0 [0078.068] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0078.068] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e480) returned 0x0 [0078.068] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e520) returned 0x0 [0078.068] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd660dbd) returned 0x0 [0078.068] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0078.068] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e198) returned 0x0 [0078.068] GetCurrentObject (hdc=0x5201084e, type=0x1) returned 0x1b00017 [0078.068] GetCurrentObject (hdc=0x5201084e, type=0x2) returned 0x1900010 [0078.069] GetCurrentObject (hdc=0x5201084e, type=0x7) returned 0x29050250 [0078.069] GetCurrentObject (hdc=0x5201084e, type=0x6) returned 0x18a002e [0078.069] SaveDC (hdc=0x5201084e) returned 1 [0078.069] GetNearestColor (hdc=0x5201084e, color=0xa0) returned 0xa0 [0078.069] GetNearestColor (hdc=0x5201084e, color=0x35) returned 0x35 [0078.069] GetNearestColor (hdc=0x5201084e, color=0x0) returned 0x0 [0078.069] GetNearestColor (hdc=0x5201084e, color=0x4848e5) returned 0x4848e5 [0078.069] GetNearestColor (hdc=0x5201084e, color=0x0) returned 0x0 [0078.069] GetNearestColor (hdc=0x5201084e, color=0x5151ff) returned 0x5151ff [0078.069] GetNearestColor (hdc=0x5201084e, color=0x4848e5) returned 0x4848e5 [0078.069] GetNearestColor (hdc=0x5201084e, color=0xc0) returned 0xc0 [0078.069] GetNearestColor (hdc=0x5201084e, color=0x0) returned 0x0 [0078.069] RestoreDC (hdc=0x5201084e, nSavedDC=-1) returned 1 [0078.069] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x5201084e) returned 0x0 [0078.069] IsAppThemed () returned 0x1 [0078.069] GetThemeAppProperties () returned 0x3 [0078.069] GetThemeAppProperties () returned 0x3 [0078.069] IsAppThemed () returned 0x1 [0078.069] GetThemeAppProperties () returned 0x3 [0078.069] GetThemeAppProperties () returned 0x3 [0078.069] DrawTextExW (in: hdc=0x8010893, lpchText="Check", cchText=5, lprc=0x14de08, format=0x2415, lpdtp=0x21c4ff8 | out: lpchText="Check", lprc=0x14de08) returned 13 [0078.069] IsAppThemed () returned 0x1 [0078.069] GetThemeAppProperties () returned 0x3 [0078.069] GetThemeAppProperties () returned 0x3 [0078.070] IsAppThemed () returned 0x1 [0078.070] GetThemeAppProperties () returned 0x3 [0078.070] GetThemeAppProperties () returned 0x3 [0078.070] IsAppThemed () returned 0x1 [0078.070] GetThemeAppProperties () returned 0x3 [0078.070] GetThemeAppProperties () returned 0x3 [0078.070] IsAppThemed () returned 0x1 [0078.070] GetThemeAppProperties () returned 0x3 [0078.070] GetThemeAppProperties () returned 0x3 [0078.070] IsThemePartDefined () returned 0x1 [0078.070] IsAppThemed () returned 0x1 [0078.070] GetThemeAppProperties () returned 0x3 [0078.070] GetThemeAppProperties () returned 0x3 [0078.070] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0078.070] IsAppThemed () returned 0x1 [0078.070] GetThemeAppProperties () returned 0x3 [0078.070] GetThemeAppProperties () returned 0x3 [0078.070] IsAppThemed () returned 0x1 [0078.070] GetThemeAppProperties () returned 0x3 [0078.070] GetThemeAppProperties () returned 0x3 [0078.070] IsThemePartDefined () returned 0x1 [0078.070] GdipCreateRegion (region=0x14df00) returned 0x0 [0078.070] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0078.070] GdipCreateMatrix (matrix=0x14df00) returned 0x0 [0078.070] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0078.070] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14df68) returned 0x0 [0078.070] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.070] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0078.070] LocalFree (hMem=0xa931f0) returned 0x0 [0078.070] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.070] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0078.070] LocalFree (hMem=0xa931f0) returned 0x0 [0078.070] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0078.071] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14dfd0) returned 0x0 [0078.071] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df90) returned 0x0 [0078.071] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df90) returned 0x0 [0078.071] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0078.071] GdipGetDC (graphics=0x1afd81d0, hdc=0x14dfd8) returned 0x0 [0078.071] GetCurrentObject (hdc=0x5201084e, type=0x1) returned 0x1b00017 [0078.071] GetCurrentObject (hdc=0x5201084e, type=0x2) returned 0x1900010 [0078.071] GetCurrentObject (hdc=0x5201084e, type=0x7) returned 0x29050250 [0078.071] GetCurrentObject (hdc=0x5201084e, type=0x6) returned 0x18a002e [0078.071] SaveDC (hdc=0x5201084e) returned 1 [0078.071] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7704086f [0078.071] GetClipRgn (hdc=0x5201084e, hrgn=0x7704086f) returned 0 [0078.071] SelectClipRgn (hdc=0x5201084e, hrgn=0xffffffff84040872) returned 2 [0078.071] DeleteObject (ho=0x7704086f) returned 1 [0078.071] DeleteObject (ho=0xffffffff84040872) returned 1 [0078.071] OffsetViewportOrgEx (in: hdc=0x5201084e, x=0, y=0, lppt=0x21c59e0 | out: lppt=0x21c59e0) returned 1 [0078.071] DrawThemeParentBackground () returned 0x0 [0078.071] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14db88 | out: lpwndpl=0x14db88) returned 1 [0078.071] GetClientRect (in: hWnd=0x401fa, lpRect=0x14daa0 | out: lpRect=0x14daa0) returned 1 [0078.071] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0078.071] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0078.071] GetSystemMetrics (nIndex=42) returned 0 [0078.071] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d800, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0078.071] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d800) returned 0xc [0078.072] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d888 | out: lpRect=0x14d888) returned 1 [0078.072] GetCurrentObject (hdc=0x5201084e, type=0x1) returned 0x1b00017 [0078.072] GetCurrentObject (hdc=0x5201084e, type=0x2) returned 0x1900010 [0078.072] GetCurrentObject (hdc=0x5201084e, type=0x7) returned 0x29050250 [0078.072] GetCurrentObject (hdc=0x5201084e, type=0x6) returned 0x18a002e [0078.072] SaveDC (hdc=0x5201084e) returned 2 [0078.072] GetNearestColor (hdc=0x5201084e, color=0xa0) returned 0xa0 [0078.072] CreateSolidBrush (color=0xa0) returned 0x7f100860 [0078.072] FillRect (hDC=0x5201084e, lprc=0x14d578, hbr=0x7f100860) returned 1 [0078.072] DeleteObject (ho=0x7f100860) returned 1 [0078.072] RestoreDC (hdc=0x5201084e, nSavedDC=-1) returned 1 [0078.072] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0078.072] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0078.072] GetSystemMetrics (nIndex=42) returned 0 [0078.072] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0078.072] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0078.072] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d7b8 | out: lpRect=0x14d7b8) returned 1 [0078.072] GetCurrentObject (hdc=0x5201084e, type=0x1) returned 0x1b00017 [0078.073] GetCurrentObject (hdc=0x5201084e, type=0x2) returned 0x1900010 [0078.073] GetCurrentObject (hdc=0x5201084e, type=0x7) returned 0x29050250 [0078.073] GetCurrentObject (hdc=0x5201084e, type=0x6) returned 0x18a002e [0078.073] SaveDC (hdc=0x5201084e) returned 2 [0078.073] GetNearestColor (hdc=0x5201084e, color=0xa0) returned 0xa0 [0078.073] CreateSolidBrush (color=0xa0) returned 0xffffffff80100860 [0078.073] FillRect (hDC=0x5201084e, lprc=0x14d4a8, hbr=0xffffffff80100860) returned 1 [0078.073] DeleteObject (ho=0xffffffff80100860) returned 1 [0078.073] RestoreDC (hdc=0x5201084e, nSavedDC=-1) returned 1 [0078.073] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0078.073] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0078.073] GetSystemMetrics (nIndex=42) returned 0 [0078.073] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0078.073] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0078.073] RestoreDC (hdc=0x5201084e, nSavedDC=-1) returned 1 [0078.073] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x5201084e) returned 0x0 [0078.073] IsAppThemed () returned 0x1 [0078.073] GetThemeAppProperties () returned 0x3 [0078.073] GetThemeAppProperties () returned 0x3 [0078.074] IsAppThemed () returned 0x1 [0078.074] GetThemeAppProperties () returned 0x3 [0078.074] GetThemeAppProperties () returned 0x3 [0078.074] IsThemePartDefined () returned 0x1 [0078.074] GdipCreateRegion (region=0x14dea0) returned 0x0 [0078.074] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0078.074] GdipCreateMatrix (matrix=0x14dea0) returned 0x0 [0078.074] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0078.074] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14df08) returned 0x0 [0078.074] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.074] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0078.074] LocalFree (hMem=0xa931f0) returned 0x0 [0078.074] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.074] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0078.074] LocalFree (hMem=0xa931f0) returned 0x0 [0078.074] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0078.074] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df70) returned 0x0 [0078.074] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df30) returned 0x0 [0078.074] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df30) returned 0x0 [0078.074] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0078.074] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df78) returned 0x0 [0078.074] GetCurrentObject (hdc=0x5201084e, type=0x1) returned 0x1b00017 [0078.074] GetCurrentObject (hdc=0x5201084e, type=0x2) returned 0x1900010 [0078.074] GetCurrentObject (hdc=0x5201084e, type=0x7) returned 0x29050250 [0078.075] GetCurrentObject (hdc=0x5201084e, type=0x6) returned 0x18a002e [0078.075] SaveDC (hdc=0x5201084e) returned 1 [0078.075] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff85040872 [0078.075] GetClipRgn (hdc=0x5201084e, hrgn=0xffffffff85040872) returned 0 [0078.075] SelectClipRgn (hdc=0x5201084e, hrgn=0x7904086f) returned 2 [0078.075] DeleteObject (ho=0xffffffff85040872) returned 1 [0078.075] DeleteObject (ho=0x7904086f) returned 1 [0078.075] OffsetViewportOrgEx (in: hdc=0x5201084e, x=0, y=0, lppt=0x21c67e8 | out: lppt=0x21c67e8) returned 1 [0078.075] IsAppThemed () returned 0x1 [0078.075] GetThemeAppProperties () returned 0x3 [0078.075] GetThemeAppProperties () returned 0x3 [0078.075] DrawThemeBackground () returned 0x0 [0078.075] RestoreDC (hdc=0x5201084e, nSavedDC=-1) returned 1 [0078.075] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x5201084e) returned 0x0 [0078.075] GdipCreateRegion (region=0x14de90) returned 0x0 [0078.075] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0078.075] GdipCreateMatrix (matrix=0x14de90) returned 0x0 [0078.075] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0078.075] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14def8) returned 0x0 [0078.075] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.075] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0078.076] LocalFree (hMem=0xa931f0) returned 0x0 [0078.076] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.076] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0078.076] LocalFree (hMem=0xa931f0) returned 0x0 [0078.076] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0078.076] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df60) returned 0x0 [0078.076] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df20) returned 0x0 [0078.076] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df20) returned 0x0 [0078.076] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0078.076] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df68) returned 0x0 [0078.076] GetCurrentObject (hdc=0x5201084e, type=0x1) returned 0x1b00017 [0078.076] GetCurrentObject (hdc=0x5201084e, type=0x2) returned 0x1900010 [0078.076] GetCurrentObject (hdc=0x5201084e, type=0x7) returned 0x29050250 [0078.076] GetCurrentObject (hdc=0x5201084e, type=0x6) returned 0x18a002e [0078.076] SaveDC (hdc=0x5201084e) returned 1 [0078.076] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x7a04086f [0078.076] GetClipRgn (hdc=0x5201084e, hrgn=0x7a04086f) returned 0 [0078.076] SelectClipRgn (hdc=0x5201084e, hrgn=0xffffffff86040872) returned 2 [0078.077] DeleteObject (ho=0x7a04086f) returned 1 [0078.077] DeleteObject (ho=0xffffffff86040872) returned 1 [0078.077] OffsetViewportOrgEx (in: hdc=0x5201084e, x=0, y=0, lppt=0x21c6cc0 | out: lppt=0x21c6cc0) returned 1 [0078.077] IsAppThemed () returned 0x1 [0078.077] GetThemeAppProperties () returned 0x3 [0078.077] GetThemeAppProperties () returned 0x3 [0078.077] GetThemeBackgroundContentRect () returned 0x0 [0078.077] RestoreDC (hdc=0x5201084e, nSavedDC=-1) returned 1 [0078.077] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x5201084e) returned 0x0 [0078.077] IsAppThemed () returned 0x1 [0078.077] GetThemeAppProperties () returned 0x3 [0078.077] GetThemeAppProperties () returned 0x3 [0078.077] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e148) returned 0x0 [0078.077] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e128) returned 0x0 [0078.077] GetCurrentObject (hdc=0x5201084e, type=0x1) returned 0x1b00017 [0078.077] GetCurrentObject (hdc=0x5201084e, type=0x2) returned 0x1900010 [0078.077] GetCurrentObject (hdc=0x5201084e, type=0x7) returned 0x29050250 [0078.077] GetCurrentObject (hdc=0x5201084e, type=0x6) returned 0x18a002e [0078.077] SaveDC (hdc=0x5201084e) returned 1 [0078.077] GetTextAlign (hdc=0x5201084e) returned 0x0 [0078.077] GetTextColor (hdc=0x5201084e) returned 0x0 [0078.077] GetCurrentObject (hdc=0x5201084e, type=0x6) returned 0x18a002e [0078.077] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dc60 | out: pv=0x14dc60) returned 92 [0078.078] SelectObject (hdc=0x5201084e, h=0x120a086d) returned 0x18a002e [0078.078] GetBkMode (hdc=0x5201084e) returned 2 [0078.078] SetBkMode (hdc=0x5201084e, mode=1) returned 2 [0078.078] DrawTextExW (in: hdc=0x5201084e, lpchText="Check", cchText=5, lprc=0x14dea0, format=0x2415, lpdtp=0x21c72a0 | out: lpchText="Check", lprc=0x14dea0) returned 13 [0078.078] DrawTextExW (in: hdc=0x5201084e, lpchText="Check", cchText=5, lprc=0x14e0b8, format=0x2015, lpdtp=0x21c72a0 | out: lpchText="Check", lprc=0x14e0b8) returned 13 [0078.078] RestoreDC (hdc=0x5201084e, nSavedDC=-1) returned 1 [0078.078] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x5201084e) returned 0x0 [0078.078] GetFocus () returned 0x0 [0078.078] IsAppThemed () returned 0x1 [0078.078] GetThemeAppProperties () returned 0x3 [0078.078] GetThemeAppProperties () returned 0x3 [0078.078] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e438) returned 0x0 [0078.078] BitBlt (hdc=0x5010830, x=0, y=0, cx=408, cy=23, hdcSrc=0x5201084e, x1=0, y1=0, rop=0xcc0020) returned 1 [0078.078] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x5201084e) returned 0x0 [0078.078] SelectPalette (hdc=0x5010830, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0078.078] SelectObject (hdc=0x5201084e, h=0x185000f) returned 0x29050250 [0078.078] DeleteDC (hdc=0x5201084e) returned 1 [0078.079] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0078.079] EndPaint (hWnd=0x1020c, lpPaint=0x14e418) returned 1 [0078.079] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.079] IsWindowUnicode (hWnd=0x1020e) returned 1 [0078.079] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.079] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.079] DispatchMessageW (lpMsg=0x14edb0) returned 0x1 [0078.079] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1020e, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0078.079] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x138, wParam=0xb010256, lParam=0x1020e) returned 0x1100059 [0078.079] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x138, wParam=0xb010256, lParam=0x1020e) returned 0x1100059 [0078.080] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.080] IsWindowUnicode (hWnd=0x10210) returned 1 [0078.080] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.080] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.080] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0078.080] BeginPaint (in: hWnd=0x10210, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0x5010825 [0078.080] SelectPalette (hdc=0x5010825, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0078.080] CreateCompatibleDC (hdc=0x5010825) returned 0x5d01084e [0078.080] SelectObject (hdc=0x5d01084e, h=0x29050250) returned 0x185000f [0078.081] GdipCreateFromHDC (hdc=0x5d01084e, graphics=0x14e428) returned 0x0 [0078.081] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0078.081] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=216, height=23, combineMode=0x0) returned 0x0 [0078.081] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0078.081] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30a70) returned 0x0 [0078.081] GdipIsMatrixIdentity (matrix=0x1ba30a70, result=0x14e4b8) returned 0x0 [0078.081] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.081] GdipGetMatrixElements (matrix=0x1ba30a70, matrixOut=0xa931f0) returned 0x0 [0078.081] LocalFree (hMem=0xa931f0) returned 0x0 [0078.081] GdipDeleteMatrix (matrix=0x1ba30a70) returned 0x0 [0078.081] GdipCreateRegion (region=0x14e450) returned 0x0 [0078.081] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0078.081] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0078.081] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0078.081] GetWindowTextLengthW (hWnd=0x10210) returned 24 [0078.176] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10210, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0078.176] GetSystemMetrics (nIndex=42) returned 0 [0078.176] GetWindowTextW (in: hWnd=0x10210, lpString=0x14e320, nMaxCount=25 | out: lpString="Your Files are Encrypted") returned 24 [0078.176] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10210, Msg=0xd, wParam=0x19, lParam=0x14e320) returned 0x18 [0078.176] GetClientRect (in: hWnd=0x10210, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0078.176] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0078.176] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0078.176] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0078.176] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0078.176] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0078.176] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.176] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0078.176] LocalFree (hMem=0xa931f0) returned 0x0 [0078.176] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0078.176] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.177] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0078.177] LocalFree (hMem=0xa931f0) returned 0x0 [0078.177] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0078.177] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0078.177] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0078.177] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0078.177] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0078.177] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0078.177] GetCurrentObject (hdc=0x5d01084e, type=0x1) returned 0x1b00017 [0078.177] GetCurrentObject (hdc=0x5d01084e, type=0x2) returned 0x1900010 [0078.177] GetCurrentObject (hdc=0x5d01084e, type=0x7) returned 0x29050250 [0078.177] GetCurrentObject (hdc=0x5d01084e, type=0x6) returned 0x18a002e [0078.177] SaveDC (hdc=0x5d01084e) returned 1 [0078.177] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff87040872 [0078.177] GetClipRgn (hdc=0x5d01084e, hrgn=0xffffffff87040872) returned 0 [0078.177] SelectClipRgn (hdc=0x5d01084e, hrgn=0x7d04086f) returned 2 [0078.177] DeleteObject (ho=0xffffffff87040872) returned 1 [0078.177] DeleteObject (ho=0x7d04086f) returned 1 [0078.177] OffsetViewportOrgEx (in: hdc=0x5d01084e, x=0, y=0, lppt=0x21c7a30 | out: lppt=0x21c7a30) returned 1 [0078.177] GetNearestColor (hdc=0x5d01084e, color=0xa0) returned 0xa0 [0078.177] CreateSolidBrush (color=0xa0) returned 0xffffffff81100860 [0078.178] FillRect (hDC=0x5d01084e, lprc=0x14e1e8, hbr=0xffffffff81100860) returned 1 [0078.178] DeleteObject (ho=0xffffffff81100860) returned 1 [0078.178] RestoreDC (hdc=0x5d01084e, nSavedDC=-1) returned 1 [0078.178] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x5d01084e) returned 0x0 [0078.178] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd640dbd) returned 0x0 [0078.178] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0078.178] GetWindowTextLengthW (hWnd=0x10210) returned 24 [0078.178] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10210, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x18 [0078.178] GetSystemMetrics (nIndex=42) returned 0 [0078.178] GetWindowTextW (in: hWnd=0x10210, lpString=0x14e320, nMaxCount=25 | out: lpString="Your Files are Encrypted") returned 24 [0078.178] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x10210, Msg=0xd, wParam=0x19, lParam=0x14e320) returned 0x18 [0078.178] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0078.178] GetCurrentObject (hdc=0x5d01084e, type=0x1) returned 0x1b00017 [0078.178] GetCurrentObject (hdc=0x5d01084e, type=0x2) returned 0x1900010 [0078.178] GetCurrentObject (hdc=0x5d01084e, type=0x7) returned 0x29050250 [0078.178] GetCurrentObject (hdc=0x5d01084e, type=0x6) returned 0x18a002e [0078.178] SaveDC (hdc=0x5d01084e) returned 1 [0078.178] GetNearestColor (hdc=0x5d01084e, color=0xffffff) returned 0xffffff [0078.178] RestoreDC (hdc=0x5d01084e, nSavedDC=-1) returned 1 [0078.178] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x5d01084e) returned 0x0 [0078.179] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0078.179] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0078.179] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0078.179] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0078.179] GetCurrentObject (hdc=0x5d01084e, type=0x1) returned 0x1b00017 [0078.179] GetCurrentObject (hdc=0x5d01084e, type=0x2) returned 0x1900010 [0078.179] GetCurrentObject (hdc=0x5d01084e, type=0x7) returned 0x29050250 [0078.179] GetCurrentObject (hdc=0x5d01084e, type=0x6) returned 0x18a002e [0078.179] SaveDC (hdc=0x5d01084e) returned 1 [0078.179] GetTextAlign (hdc=0x5d01084e) returned 0x0 [0078.179] GetTextColor (hdc=0x5d01084e) returned 0x0 [0078.179] SetTextColor (hdc=0x5d01084e, color=0xffffff) returned 0x0 [0078.179] GetCurrentObject (hdc=0x5d01084e, type=0x6) returned 0x18a002e [0078.179] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0078.179] SelectObject (hdc=0x5d01084e, h=0x160a0258) returned 0x18a002e [0078.179] GetBkMode (hdc=0x5d01084e) returned 2 [0078.179] SetBkMode (hdc=0x5d01084e, mode=1) returned 2 [0078.179] DrawTextExW (in: hdc=0x5d01084e, lpchText="Your Files are Encrypted", cchText=24, lprc=0x14e1c8, format=0x0, lpdtp=0x21c8338 | out: lpchText="Your Files are Encrypted", lprc=0x14e1c8) returned 23 [0078.180] RestoreDC (hdc=0x5d01084e, nSavedDC=-1) returned 1 [0078.180] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x5d01084e) returned 0x0 [0078.180] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0078.180] BitBlt (hdc=0x5010825, x=0, y=0, cx=216, cy=23, hdcSrc=0x5d01084e, x1=0, y1=0, rop=0xcc0020) returned 1 [0078.180] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x5d01084e) returned 0x0 [0078.180] SelectPalette (hdc=0x5010825, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0078.180] SelectObject (hdc=0x5d01084e, h=0x185000f) returned 0x29050250 [0078.180] DeleteDC (hdc=0x5d01084e) returned 1 [0078.180] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0078.180] EndPaint (hWnd=0x10210, lpPaint=0x14e448) returned 1 [0078.180] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.180] IsWindowUnicode (hWnd=0x10214) returned 1 [0078.180] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.180] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.180] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0078.180] BeginPaint (in: hWnd=0x10214, lpPaint=0x14e4e8 | out: lpPaint=0x14e4e8) returned 0x5010825 [0078.180] SelectPalette (hdc=0x5010825, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0078.180] GetWindowTextLengthW (hWnd=0x10214) returned 10 [0078.180] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xa [0078.181] GetSystemMetrics (nIndex=42) returned 0 [0078.181] GetWindowTextW (in: hWnd=0x10214, lpString=0x14e380, nMaxCount=11 | out: lpString="Enter Code") returned 10 [0078.181] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0xd, wParam=0xb, lParam=0x14e380) returned 0xa [0078.181] SelectPalette (hdc=0x5010825, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0078.181] EndPaint (hWnd=0x10214, lpPaint=0x14e488) returned 1 [0078.181] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.181] IsWindowUnicode (hWnd=0x10216) returned 1 [0078.181] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.181] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.181] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0078.181] BeginPaint (in: hWnd=0x10216, lpPaint=0x14e478 | out: lpPaint=0x14e478) returned 0xb010256 [0078.181] EndPaint (hWnd=0x10216, lpPaint=0x14e418) returned 1 [0078.181] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.181] IsWindowUnicode (hWnd=0x10218) returned 1 [0078.181] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.181] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.181] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0078.181] BeginPaint (in: hWnd=0x10218, lpPaint=0x14e478 | out: lpPaint=0x14e478) returned 0x5010830 [0078.181] EndPaint (hWnd=0x10218, lpPaint=0x14e418) returned 1 [0078.181] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.181] IsWindowUnicode (hWnd=0x1021a) returned 1 [0078.181] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.182] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.182] DispatchMessageW (lpMsg=0x14edb0) returned 0x1 [0078.182] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021a, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0078.182] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.182] IsWindowUnicode (hWnd=0x1021c) returned 1 [0078.182] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.182] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.182] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0078.182] BeginPaint (in: hWnd=0x1021c, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0xb010256 [0078.182] EndPaint (hWnd=0x1021c, lpPaint=0x14e448) returned 1 [0078.182] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.182] IsWindowUnicode (hWnd=0x1021e) returned 1 [0078.182] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.182] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.182] DispatchMessageW (lpMsg=0x14edb0) returned 0x1 [0078.182] CallWindowProcW (lpPrevWndFunc=0x7fefba4975c, hWnd=0x1021e, Msg=0xf, wParam=0x0, lParam=0x0) returned 0x1 [0078.182] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.182] IsWindowUnicode (hWnd=0x10220) returned 1 [0078.182] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.182] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.182] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0078.183] BeginPaint (in: hWnd=0x10220, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0x5010825 [0078.183] EndPaint (hWnd=0x10220, lpPaint=0x14e448) returned 1 [0078.183] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.183] IsWindowUnicode (hWnd=0x201ec) returned 1 [0078.183] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.183] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.183] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0078.183] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.183] IsWindowUnicode (hWnd=0x201e6) returned 1 [0078.183] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.183] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.183] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0078.183] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.183] IsWindowUnicode (hWnd=0x10212) returned 1 [0078.183] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.183] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.183] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0078.318] SetWindowPos (hWnd=0x401fa, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0078.318] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x46, wParam=0x0, lParam=0x14e690) returned 0x0 [0078.339] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0078.339] AdjustWindowRectEx (in: lpRect=0x14de80, dwStyle=0x56cf0000, bMenu=0, dwExStyle=0x50001 | out: lpRect=0x14de80) returned 1 [0078.386] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0078.386] AdjustWindowRectEx (in: lpRect=0x14dd40, dwStyle=0x5601008d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dd40) returned 1 [0078.415] GdipCreateFontFamilyFromName (name="Microsoft Sans Serif", fontCollection=0x0, fontFamily=0x14dcf0) returned 0x0 [0078.416] GdipCreateFont (fontFamily=0x1b47c5e0, emSize=0x7feeffbcd25, style=0, unit=0x3, font=0x21c9c28) returned 0x0 [0078.416] GdipGetFontSize (font=0x1ba30a70, size=0x21c9c30) returned 0x0 [0078.416] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0078.416] AdjustWindowRectEx (in: lpRect=0x14dbd8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dbd8) returned 1 [0078.416] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0078.416] AdjustWindowRectEx (in: lpRect=0x14dbd8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14dbd8) returned 1 [0078.420] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0078.420] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.Window.0.app.0.141b42a_r12_ad1", lpWindowName="TimerNativeWindow", dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0xfffffffffffffffd, hMenu=0x0, hInstance=0xcc0000, lpParam=0x0) returned 0x201c8 [0078.420] SetWindowLongPtrW (hWnd=0x201c8, nIndex=-4, dwNewLong=0x76f7b0ac) returned 0x1aff14ac [0078.420] GetWindowLongPtrW (hWnd=0x201c8, nIndex=-4) returned 0x76f7b0ac [0078.421] SetWindowLongPtrW (hWnd=0x201c8, nIndex=-4, dwNewLong=0x1b001b9c) returned 0x76f7b0ac [0078.421] GetWindowLongPtrW (hWnd=0x201c8, nIndex=-4) returned 0x1b001b9c [0078.421] GetWindowLongPtrW (hWnd=0x201c8, nIndex=-16) returned 0x4c00000 [0078.421] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201c8, Msg=0x24, wParam=0x0, lParam=0x14d3a0) returned 0x0 [0078.421] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201c8, Msg=0x81, wParam=0x0, lParam=0x14d310) returned 0x1 [0078.421] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201c8, Msg=0x83, wParam=0x0, lParam=0x14d3c0) returned 0x0 [0078.421] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201c8, Msg=0x1, wParam=0x0, lParam=0x14d2e0) returned 0x0 [0078.421] SetTimer (hWnd=0x201c8, nIDEvent=0x4, uElapse=0x64, lpTimerFunc=0x0) returned 0x4 [0078.421] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0078.421] AdjustWindowRectEx (in: lpRect=0x14dca8, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x14dca8) returned 1 [0078.421] GetSystemMetrics (nIndex=59) returned 1460 [0078.421] GetSystemMetrics (nIndex=60) returned 920 [0078.421] GetSystemMetrics (nIndex=34) returned 132 [0078.421] GetSystemMetrics (nIndex=35) returned 38 [0078.422] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0078.422] AdjustWindowRectEx (in: lpRect=0x14da68, dwStyle=0x2cf0000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x14da68) returned 1 [0078.422] GetCurrentThreadId () returned 0xa50 [0078.422] GetCurrentThreadId () returned 0xa50 [0078.422] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0078.422] AdjustWindowRectEx (in: lpRect=0x14d9b8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d9b8) returned 1 [0078.422] SelectObject (hdc=0x8010893, h=0x200a0899) returned 0x120a086d [0078.422] DrawTextExW (in: hdc=0x8010893, lpchText="Unrecovered Computer", cchText=20, lprc=0x14d928, format=0x2400, lpdtp=0x21ca2a8 | out: lpchText="Unrecovered Computer", lprc=0x14d928) returned 20 [0078.425] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0078.425] AdjustWindowRectEx (in: lpRect=0x14dab0, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x14dab0) returned 1 [0078.425] AdjustWindowRectEx (in: lpRect=0x14dc28, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x14dc28) returned 1 [0078.425] GetSystemMetrics (nIndex=59) returned 1460 [0078.426] GetSystemMetrics (nIndex=60) returned 920 [0078.426] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0078.426] AdjustWindowRectEx (in: lpRect=0x14d860, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x14d860) returned 1 [0078.426] AdjustWindowRectEx (in: lpRect=0x14d9e8, dwStyle=0x2010000, bMenu=0, dwExStyle=0x50000 | out: lpRect=0x14d9e8) returned 1 [0078.428] CreateCompatibleDC (hdc=0x0) returned 0x6601084e [0078.428] SelectObject (hdc=0x6601084e, h=0x60a0875) returned 0x18a002e [0078.428] GetTextMetricsW (in: hdc=0x6601084e, lptm=0x14db78 | out: lptm=0x14db78) returned 1 [0078.428] GetTextExtentPoint32W (in: hdc=0x6601084e, lpString="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", c=52, psizl=0x21ca708 | out: psizl=0x21ca708) returned 1 [0078.428] SelectObject (hdc=0x6601084e, h=0x18a002e) returned 0x60a0875 [0078.428] DeleteDC (hdc=0x6601084e) returned 1 [0078.428] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0078.428] AdjustWindowRectEx (in: lpRect=0x14d7e0, dwStyle=0x2010000, bMenu=0, dwExStyle=0x90000 | out: lpRect=0x14d7e0) returned 1 [0078.428] AdjustWindowRectEx (in: lpRect=0x14da60, dwStyle=0x2010000, bMenu=0, dwExStyle=0x90000 | out: lpRect=0x14da60) returned 1 [0078.429] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0078.429] AdjustWindowRectEx (in: lpRect=0x14d6d0, dwStyle=0x2010000, bMenu=0, dwExStyle=0x90000 | out: lpRect=0x14d6d0) returned 1 [0078.429] AdjustWindowRectEx (in: lpRect=0x14d850, dwStyle=0x2010000, bMenu=0, dwExStyle=0x90000 | out: lpRect=0x14d850) returned 1 [0078.429] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0078.429] AdjustWindowRectEx (in: lpRect=0x14da70, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14da70) returned 1 [0078.429] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0078.429] AdjustWindowRectEx (in: lpRect=0x14d8c0, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d8c0) returned 1 [0078.429] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0078.429] AdjustWindowRectEx (in: lpRect=0x14d668, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14d668) returned 1 [0078.429] GetCurrentActCtx (in: lphActCtx=0x14e510 | out: lphActCtx=0x14e510*=0xa52648) returned 1 [0078.430] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0078.430] AdjustWindowRectEx (in: lpRect=0x14e430, dwStyle=0x2010000, bMenu=0, dwExStyle=0x90000 | out: lpRect=0x14e430) returned 1 [0078.430] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0078.430] CreateWindowExW (dwExStyle=0x90000, lpClassName="WindowsForms10.Window.8.app.0.141b42a_r12_ad1", lpWindowName="Info", dwStyle=0x2010000, X=0, Y=0, nWidth=234, nHeight=39, hWndParent=0x0, hMenu=0x0, hInstance=0xcc0000, lpParam=0x0) returned 0x201ca [0078.430] SetWindowLongPtrW (hWnd=0x201ca, nIndex=-4, dwNewLong=0x76f7b0ac) returned 0x1aff131c [0078.430] GetWindowLongPtrW (hWnd=0x201ca, nIndex=-4) returned 0x76f7b0ac [0078.430] SetWindowLongPtrW (hWnd=0x201ca, nIndex=-4, dwNewLong=0x1b001bec) returned 0x76f7b0ac [0078.430] GetWindowLongPtrW (hWnd=0x201ca, nIndex=-4) returned 0x1b001bec [0078.430] GetWindowLongPtrW (hWnd=0x201ca, nIndex=-16) returned 0x6c10000 [0078.430] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x81, wParam=0x0, lParam=0x14dbd0) returned 0x1 [0078.431] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x83, wParam=0x0, lParam=0x14dc80) returned 0x0 [0078.431] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x1, wParam=0x0, lParam=0x14dbb0) returned 0x0 [0078.431] GetClientRect (in: hWnd=0x201ca, lpRect=0x14d630 | out: lpRect=0x14d630) returned 1 [0078.431] GetWindowRect (in: hWnd=0x201ca, lpRect=0x14d630 | out: lpRect=0x14d630) returned 1 [0078.431] SetWindowTextW (hWnd=0x201ca, lpString="Info") returned 1 [0078.432] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0xc, wParam=0x0, lParam=0x21c97f4) returned 0x1 [0078.433] SetLayeredWindowAttributes (hwnd=0x201ca, crKey=0x0, bAlpha=0x0, dwFlags=0x1) returned 1 [0078.434] GetStartupInfoW (in: lpStartupInfo=0x21cab78 | out: lpStartupInfo=0x21cab78*(cb=0x68, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\SadComputer.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0078.434] GetParent (hWnd=0x201ca) returned 0x0 [0078.434] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0078.434] CreateWindowExW (dwExStyle=0x80, lpClassName="WindowsForms10.Window.0.app.0.141b42a_r12_ad1", lpWindowName=0x0, dwStyle=0x0, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0xcc0000, lpParam=0x0) returned 0x401e4 [0078.434] SetWindowLongPtrW (hWnd=0x401e4, nIndex=-4, dwNewLong=0x76f7b0ac) returned 0x1aff14ac [0078.434] GetWindowLongPtrW (hWnd=0x401e4, nIndex=-4) returned 0x76f7b0ac [0078.434] SetWindowLongPtrW (hWnd=0x401e4, nIndex=-4, dwNewLong=0x1b001c3c) returned 0x76f7b0ac [0078.435] GetWindowLongPtrW (hWnd=0x401e4, nIndex=-4) returned 0x1b001c3c [0078.435] GetWindowLongPtrW (hWnd=0x401e4, nIndex=-16) returned 0x4c00000 [0078.435] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401e4, Msg=0x24, wParam=0x0, lParam=0x14dc70) returned 0x0 [0078.435] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401e4, Msg=0x81, wParam=0x0, lParam=0x14dbe0) returned 0x1 [0078.435] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401e4, Msg=0x83, wParam=0x0, lParam=0x14dc90) returned 0x0 [0078.435] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401e4, Msg=0x1, wParam=0x0, lParam=0x14dbe0) returned 0x0 [0078.435] SetWindowLongPtrW (hWnd=0x201ca, nIndex=-8, dwNewLong=0x401e4) returned 0x0 [0078.436] SendMessageW (hWnd=0x201ca, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0078.436] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x80, wParam=0x0, lParam=0x0) returned 0x0 [0078.436] SendMessageW (hWnd=0x201ca, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0078.436] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x80, wParam=0x1, lParam=0x0) returned 0x0 [0078.437] GetSystemMenu (hWnd=0x201ca, bRevert=0) returned 0x0 [0078.437] GetWindowPlacement (in: hWnd=0x201ca, lpwndpl=0x14e518 | out: lpwndpl=0x14e518) returned 1 [0078.437] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x0) returned 1 [0078.437] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x0) returned 1 [0078.437] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x0) returned 1 [0078.437] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0078.437] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0078.437] GetClientRect (in: hWnd=0x201ca, lpRect=0x14e5e0 | out: lpRect=0x14e5e0) returned 1 [0078.437] GetClientRect (in: hWnd=0x201ca, lpRect=0x14e510 | out: lpRect=0x14e510) returned 1 [0078.437] GetWindowRect (in: hWnd=0x201ca, lpRect=0x14e510 | out: lpRect=0x14e510) returned 1 [0078.437] SetWindowLongPtrW (hWnd=0x201ca, nIndex=-8, dwNewLong=0x401e4) returned 0x401e4 [0078.437] SendMessageW (hWnd=0x401e4, Msg=0x80, wParam=0x1, lParam=0x90097) returned 0x0 [0078.437] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401e4, Msg=0x80, wParam=0x1, lParam=0x90097) returned 0x0 [0078.438] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401e4, Msg=0xd, wParam=0x104, lParam=0x1a696f60) returned 0x0 [0078.438] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401e4, Msg=0xd, wParam=0x104, lParam=0x1a696f60) returned 0x0 [0078.438] SetWindowPos (hWnd=0x201ca, hWndInsertAfter=0xffffffffffffffff, X=0, Y=0, cx=0, cy=0, uFlags=0x3) returned 1 [0078.438] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x46, wParam=0x0, lParam=0x14e4a0) returned 0x0 [0078.438] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401e4, Msg=0x46, wParam=0x0, lParam=0x14e4a0) returned 0x0 [0078.438] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x46, wParam=0x0, lParam=0x14e4a0) returned 0x0 [0078.439] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401e4, Msg=0x46, wParam=0x0, lParam=0x14e4a0) returned 0x0 [0078.439] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0078.439] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0078.439] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0078.439] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401e4, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0078.439] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301a2, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0078.439] NtdllDefWindowProc_W (hWnd=0x40120, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0078.439] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0078.439] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0078.440] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0078.440] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0078.440] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0078.440] GetParent (hWnd=0x201ca) returned 0x0 [0078.440] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0078.440] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0078.440] GetWindowPlacement (in: hWnd=0x201ca, lpwndpl=0x14e078 | out: lpwndpl=0x14e078) returned 1 [0078.440] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x47, wParam=0x0, lParam=0x14e4a0) returned 0x0 [0078.440] GetClientRect (in: hWnd=0x201ca, lpRect=0x14df10 | out: lpRect=0x14df10) returned 1 [0078.440] GetWindowRect (in: hWnd=0x201ca, lpRect=0x14df10 | out: lpRect=0x14df10) returned 1 [0078.441] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x83, wParam=0x1, lParam=0x14de00) returned 0x0 [0078.441] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0078.441] GetWindowLongPtrW (hWnd=0x201ca, nIndex=-16) returned 0x6c10000 [0078.441] GetWindowLongPtrW (hWnd=0x201ca, nIndex=-16) returned 0x6c10000 [0078.441] GetWindowLongPtrW (hWnd=0x201ca, nIndex=-20) returned 0x90108 [0078.441] SetWindowLongPtrW (hWnd=0x201ca, nIndex=-16, dwNewLong=0x2010000) returned 0x6c10000 [0078.441] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x7c, wParam=0xfffffffffffffff0, lParam=0x14e3f0) returned 0x0 [0078.442] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x7d, wParam=0xfffffffffffffff0, lParam=0x14e3f0) returned 0x0 [0078.442] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x46, wParam=0x0, lParam=0x14d7f0) returned 0x0 [0078.442] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x83, wParam=0x1, lParam=0x14d7c0) returned 0x0 [0078.442] GetWindowPlacement (in: hWnd=0x201ca, lpwndpl=0x14d3c8 | out: lpwndpl=0x14d3c8) returned 1 [0078.442] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x47, wParam=0x0, lParam=0x14d7f0) returned 0x0 [0078.442] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0078.442] GetClientRect (in: hWnd=0x201ca, lpRect=0x14c940 | out: lpRect=0x14c940) returned 1 [0078.442] GetWindowRect (in: hWnd=0x201ca, lpRect=0x14c940 | out: lpRect=0x14c940) returned 1 [0078.442] GetWindowTextLengthW (hWnd=0x201ca) returned 4 [0078.442] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0078.443] GetSystemMetrics (nIndex=42) returned 0 [0078.443] GetWindowTextW (in: hWnd=0x201ca, lpString=0x14c580, nMaxCount=5 | out: lpString="Info") returned 4 [0078.443] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0xd, wParam=0x5, lParam=0x14c580) returned 0x4 [0078.443] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x5, wParam=0x0, lParam=0x2700ea) returned 0x0 [0078.443] GetClientRect (in: hWnd=0x201ca, lpRect=0x14d260 | out: lpRect=0x14d260) returned 1 [0078.443] GetWindowRect (in: hWnd=0x201ca, lpRect=0x14d260 | out: lpRect=0x14d260) returned 1 [0078.443] SetWindowLongPtrW (hWnd=0x201ca, nIndex=-20, dwNewLong=0x90000) returned 0x90008 [0078.443] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x7c, wParam=0xffffffffffffffec, lParam=0x14e3f0) returned 0x0 [0078.443] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x7d, wParam=0xffffffffffffffec, lParam=0x14e3f0) returned 0x0 [0078.443] SetWindowPos (hWnd=0x201ca, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x37) returned 1 [0078.443] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x46, wParam=0x0, lParam=0x14e440) returned 0x0 [0078.443] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x83, wParam=0x1, lParam=0x14e410) returned 0x0 [0078.444] GetWindowPlacement (in: hWnd=0x201ca, lpwndpl=0x14e018 | out: lpwndpl=0x14e018) returned 1 [0078.444] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x47, wParam=0x0, lParam=0x14e440) returned 0x0 [0078.444] GetClientRect (in: hWnd=0x201ca, lpRect=0x14deb0 | out: lpRect=0x14deb0) returned 1 [0078.444] GetWindowRect (in: hWnd=0x201ca, lpRect=0x14deb0 | out: lpRect=0x14deb0) returned 1 [0078.444] RedrawWindow (hWnd=0x201ca, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0078.444] GetSystemMenu (hWnd=0x201ca, bRevert=0) returned 0x0 [0078.444] GetWindowPlacement (in: hWnd=0x201ca, lpwndpl=0x14e4b8 | out: lpwndpl=0x14e4b8) returned 1 [0078.444] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf020, uEnable=0x0) returned 1 [0078.444] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf030, uEnable=0x0) returned 1 [0078.444] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf060, uEnable=0x0) returned 1 [0078.444] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf120, uEnable=0x1) returned 1 [0078.444] EnableMenuItem (hMenu=0x0, uIDEnableItem=0xf000, uEnable=0x1) returned 1 [0078.444] ShowWindow (hWnd=0x201ca, nCmdShow=5) returned 0 [0078.444] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0078.444] GetCurrentActCtx (in: lphActCtx=0x14df00 | out: lphActCtx=0x14df00*=0xa52648) returned 1 [0078.444] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0078.445] GetModuleHandleW (lpModuleName=0x0) returned 0xcc0000 [0078.445] CreateWindowExW (dwExStyle=0x0, lpClassName="WindowsForms10.STATIC.app.0.141b42a_r12_ad1", lpWindowName="Unrecovered Computer", dwStyle=0x5600000d, X=1, Y=1, nWidth=174, nHeight=20, hWndParent=0x201ca, hMenu=0x0, hInstance=0xcc0000, lpParam=0x0) returned 0x301e0 [0078.445] SetWindowLongPtrW (hWnd=0x301e0, nIndex=-4, dwNewLong=0x7fefba461b4) returned 0x1aff154c [0078.445] GetWindowLongPtrW (hWnd=0x301e0, nIndex=-4) returned 0x7fefba461b4 [0078.445] SetWindowLongPtrW (hWnd=0x301e0, nIndex=-4, dwNewLong=0x1b001c8c) returned 0x7fefba461b4 [0078.445] GetWindowLongPtrW (hWnd=0x301e0, nIndex=-4) returned 0x1b001c8c [0078.445] GetWindowLongPtrW (hWnd=0x301e0, nIndex=-16) returned 0x4600000d [0078.445] GetWindowLongPtrW (hWnd=0x301e0, nIndex=-12) returned 0x0 [0078.445] SetWindowLongPtrW (hWnd=0x301e0, nIndex=-12, dwNewLong=0x301e0) returned 0x0 [0078.445] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x301e0, Msg=0x81, wParam=0x0, lParam=0x14d5c0) returned 0x1 [0078.445] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x301e0, Msg=0x83, wParam=0x0, lParam=0x14d670) returned 0x0 [0078.445] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x301e0, Msg=0x1, wParam=0x0, lParam=0x14d580) returned 0x0 [0078.446] GetWindow (hWnd=0x301e0, uCmd=0x3) returned 0x0 [0078.446] GetClientRect (in: hWnd=0x301e0, lpRect=0x14cfc0 | out: lpRect=0x14cfc0) returned 1 [0078.446] GetWindowRect (in: hWnd=0x301e0, lpRect=0x14cfc0 | out: lpRect=0x14cfc0) returned 1 [0078.446] GetParent (hWnd=0x301e0) returned 0x201ca [0078.446] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x201ca, lpPoints=0x14cfc0, cPoints=0x2 | out: lpPoints=0x14cfc0) returned 0 [0078.446] SetWindowTextW (hWnd=0x301e0, lpString="Unrecovered Computer") returned 1 [0078.446] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x301e0, Msg=0xc, wParam=0x0, lParam=0x21c97ac) returned 0x1 [0078.446] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x301e0, Msg=0x5, wParam=0x0, lParam=0x1400ae) returned 0x0 [0078.446] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x301e0, Msg=0x3, wParam=0x0, lParam=0x10001) returned 0x0 [0078.446] GetClientRect (in: hWnd=0x301e0, lpRect=0x14d110 | out: lpRect=0x14d110) returned 1 [0078.447] GetWindowRect (in: hWnd=0x301e0, lpRect=0x14d110 | out: lpRect=0x14d110) returned 1 [0078.447] GetParent (hWnd=0x301e0) returned 0x201ca [0078.447] MapWindowPoints (in: hWndFrom=0x0, hWndTo=0x201ca, lpPoints=0x14d110, cPoints=0x2 | out: lpPoints=0x14d110) returned 0 [0078.447] SendMessageW (hWnd=0x301e0, Msg=0x2210, wParam=0x1e00001, lParam=0x301e0) returned 0x0 [0078.447] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x301e0, Msg=0x2210, wParam=0x1e00001, lParam=0x301e0) returned 0x0 [0078.447] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x301e0, Msg=0x18, wParam=0x1, lParam=0x0) returned 0x0 [0078.447] GetParent (hWnd=0x301e0) returned 0x201ca [0078.447] GetWindowTextLengthW (hWnd=0x201ca) returned 4 [0078.447] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0078.447] GetSystemMetrics (nIndex=42) returned 0 [0078.447] GetWindowTextW (in: hWnd=0x201ca, lpString=0x14de80, nMaxCount=5 | out: lpString="Info") returned 4 [0078.447] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0xd, wParam=0x5, lParam=0x14de80) returned 0x4 [0078.451] InvalidateRect (hWnd=0x301e0, lpRect=0x0, bErase=1) returned 1 [0078.451] GetWindowThreadProcessId (in: hWnd=0x201ca, lpdwProcessId=0x14df40 | out: lpdwProcessId=0x14df40) returned 0xa50 [0078.451] GetCurrentThreadId () returned 0xa50 [0078.451] PostMessageW (hWnd=0x201ca, Msg=0xc146, wParam=0x0, lParam=0x0) returned 1 [0078.451] GetWindowTextLengthW (hWnd=0x201ca) returned 4 [0078.451] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0078.451] GetSystemMetrics (nIndex=42) returned 0 [0078.451] GetWindowTextW (in: hWnd=0x201ca, lpString=0x14de50, nMaxCount=5 | out: lpString="Info") returned 4 [0078.451] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0xd, wParam=0x5, lParam=0x14de50) returned 0x4 [0078.451] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x46, wParam=0x0, lParam=0x14e650) returned 0x0 [0078.451] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401e4, Msg=0x46, wParam=0x0, lParam=0x14e650) returned 0x0 [0078.454] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0078.454] GetWindowPlacement (in: hWnd=0x201ca, lpwndpl=0x14e248 | out: lpwndpl=0x14e248) returned 1 [0078.454] GetClientRect (in: hWnd=0x201ca, lpRect=0x14e160 | out: lpRect=0x14e160) returned 1 [0078.454] GetWindowTextLengthW (hWnd=0x201ca) returned 4 [0078.454] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0078.454] GetSystemMetrics (nIndex=42) returned 0 [0078.455] GetWindowTextW (in: hWnd=0x201ca, lpString=0x14ded0, nMaxCount=5 | out: lpString="Info") returned 4 [0078.455] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0xd, wParam=0x5, lParam=0x14ded0) returned 0x4 [0078.455] GetClientRect (in: hWnd=0x201ca, lpRect=0x14df48 | out: lpRect=0x14df48) returned 1 [0078.455] GetCurrentObject (hdc=0xb010256, type=0x1) returned 0x1b00017 [0078.455] GetCurrentObject (hdc=0xb010256, type=0x2) returned 0x1900010 [0078.455] GetCurrentObject (hdc=0xb010256, type=0x7) returned 0x6905084e [0078.455] GetCurrentObject (hdc=0xb010256, type=0x6) returned 0x18a002e [0078.455] SaveDC (hdc=0xb010256) returned 1 [0078.455] GetNearestColor (hdc=0xb010256, color=0x0) returned 0x0 [0078.455] CreateSolidBrush (color=0x0) returned 0xffffffff82100860 [0078.455] FillRect (hDC=0xb010256, lprc=0x14dc38, hbr=0xffffffff82100860) returned 1 [0078.455] DeleteObject (ho=0xffffffff82100860) returned 1 [0078.455] RestoreDC (hdc=0xb010256, nSavedDC=-1) returned 1 [0078.456] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x301e0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0078.456] GetWindowPlacement (in: hWnd=0x201ca, lpwndpl=0x14e228 | out: lpwndpl=0x14e228) returned 1 [0078.456] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x47, wParam=0x0, lParam=0x14e650) returned 0x0 [0078.456] GetClientRect (in: hWnd=0x201ca, lpRect=0x14e0c0 | out: lpRect=0x14e0c0) returned 1 [0078.456] GetWindowRect (in: hWnd=0x201ca, lpRect=0x14e0c0 | out: lpRect=0x14e0c0) returned 1 [0078.456] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x5, wParam=0x0, lParam=0x2700ea) returned 0x0 [0078.456] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0078.456] GetClientRect (in: hWnd=0x201ca, lpRect=0x14e150 | out: lpRect=0x14e150) returned 1 [0078.456] GetWindowRect (in: hWnd=0x201ca, lpRect=0x14e150 | out: lpRect=0x14e150) returned 1 [0078.456] SetFocus (hWnd=0x201ca) returned 0x201ca [0078.456] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.456] IsWindowUnicode (hWnd=0x201ca) returned 1 [0078.456] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.456] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.457] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0078.457] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.457] GetMessageA (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.457] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.457] DispatchMessageA (lpMsg=0x14edb0) returned 0x0 [0078.457] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.457] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0078.457] IsWindowUnicode (hWnd=0x1020c) returned 1 [0078.457] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.457] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x2820317) returned 0x1 [0078.457] SetCursor (hCursor=0x10003) returned 0x10003 [0078.457] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.457] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0078.457] GetKeyState (nVirtKey=1) returned 0 [0078.457] GetKeyState (nVirtKey=2) returned 0 [0078.457] GetKeyState (nVirtKey=4) returned 0 [0078.457] GetKeyState (nVirtKey=5) returned 0 [0078.457] GetKeyState (nVirtKey=6) returned 0 [0078.457] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.457] IsWindowUnicode (hWnd=0x201ca) returned 1 [0078.457] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.457] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.457] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0078.457] BeginPaint (in: hWnd=0x201ca, lpPaint=0x14e4e8 | out: lpPaint=0x14e4e8) returned 0xb010256 [0078.458] SelectPalette (hdc=0xb010256, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0078.458] GetWindowTextLengthW (hWnd=0x201ca) returned 4 [0078.458] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0078.458] GetSystemMetrics (nIndex=42) returned 0 [0078.458] GetWindowTextW (in: hWnd=0x201ca, lpString=0x14e390, nMaxCount=5 | out: lpString="Info") returned 4 [0078.458] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0xd, wParam=0x5, lParam=0x14e390) returned 0x4 [0078.458] SelectPalette (hdc=0xb010256, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0078.458] EndPaint (hWnd=0x201ca, lpPaint=0x14e488) returned 1 [0078.458] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.458] IsWindowUnicode (hWnd=0x301e0) returned 1 [0078.458] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.458] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.458] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0078.458] BeginPaint (in: hWnd=0x301e0, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0x5010830 [0078.458] SelectPalette (hdc=0x5010830, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0078.458] CreateCompatibleDC (hdc=0x5010830) returned 0x1c010847 [0078.458] SelectObject (hdc=0x1c010847, h=0x29050250) returned 0x185000f [0078.458] GdipCreateFromHDC (hdc=0x1c010847, graphics=0x14e428) returned 0x0 [0078.458] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0078.458] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=174, height=20, combineMode=0x0) returned 0x0 [0078.459] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0078.459] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0078.459] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14e4b8) returned 0x0 [0078.459] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.459] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0078.459] LocalFree (hMem=0xa931f0) returned 0x0 [0078.459] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0078.459] GdipCreateRegion (region=0x14e450) returned 0x0 [0078.459] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0078.459] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0078.459] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0078.459] GetWindowTextLengthW (hWnd=0x301e0) returned 20 [0078.459] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x301e0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x14 [0078.459] GetSystemMetrics (nIndex=42) returned 0 [0078.459] GetWindowTextW (in: hWnd=0x301e0, lpString=0x14e330, nMaxCount=21 | out: lpString="Unrecovered Computer") returned 20 [0078.459] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x301e0, Msg=0xd, wParam=0x15, lParam=0x14e330) returned 0x14 [0078.459] GetClientRect (in: hWnd=0x301e0, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0078.459] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0078.459] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0078.459] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0078.459] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0078.459] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0078.460] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.460] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0078.460] LocalFree (hMem=0xa931f0) returned 0x0 [0078.460] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0078.460] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.460] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0078.460] LocalFree (hMem=0xa931f0) returned 0x0 [0078.460] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0078.460] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0078.460] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0078.460] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0078.460] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0078.460] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0078.460] GetCurrentObject (hdc=0x1c010847, type=0x1) returned 0x1b00017 [0078.460] GetCurrentObject (hdc=0x1c010847, type=0x2) returned 0x1900010 [0078.460] GetCurrentObject (hdc=0x1c010847, type=0x7) returned 0x29050250 [0078.460] GetCurrentObject (hdc=0x1c010847, type=0x6) returned 0x18a002e [0078.460] SaveDC (hdc=0x1c010847) returned 1 [0078.460] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff90040872 [0078.460] GetClipRgn (hdc=0x1c010847, hrgn=0xffffffff90040872) returned 0 [0078.460] SelectClipRgn (hdc=0x1c010847, hrgn=0xffffffff88040763) returned 2 [0078.461] DeleteObject (ho=0xffffffff90040872) returned 1 [0078.461] DeleteObject (ho=0xffffffff88040763) returned 1 [0078.461] OffsetViewportOrgEx (in: hdc=0x1c010847, x=0, y=0, lppt=0x21cc228 | out: lppt=0x21cc228) returned 1 [0078.461] GetNearestColor (hdc=0x1c010847, color=0x0) returned 0x0 [0078.461] CreateSolidBrush (color=0x0) returned 0xffffffff83100860 [0078.461] FillRect (hDC=0x1c010847, lprc=0x14e1e8, hbr=0xffffffff83100860) returned 1 [0078.461] DeleteObject (ho=0xffffffff83100860) returned 1 [0078.461] RestoreDC (hdc=0x1c010847, nSavedDC=-1) returned 1 [0078.461] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x1c010847) returned 0x0 [0078.461] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd620dbd) returned 0x0 [0078.461] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0078.461] GetWindowTextLengthW (hWnd=0x301e0) returned 20 [0078.461] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x301e0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x14 [0078.461] GetSystemMetrics (nIndex=42) returned 0 [0078.461] GetWindowTextW (in: hWnd=0x301e0, lpString=0x14e330, nMaxCount=21 | out: lpString="Unrecovered Computer") returned 20 [0078.461] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x301e0, Msg=0xd, wParam=0x15, lParam=0x14e330) returned 0x14 [0078.461] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0078.461] GetCurrentObject (hdc=0x1c010847, type=0x1) returned 0x1b00017 [0078.461] GetCurrentObject (hdc=0x1c010847, type=0x2) returned 0x1900010 [0078.461] GetCurrentObject (hdc=0x1c010847, type=0x7) returned 0x29050250 [0078.462] GetCurrentObject (hdc=0x1c010847, type=0x6) returned 0x18a002e [0078.462] SaveDC (hdc=0x1c010847) returned 1 [0078.462] GetNearestColor (hdc=0x1c010847, color=0xffffff) returned 0xffffff [0078.462] RestoreDC (hdc=0x1c010847, nSavedDC=-1) returned 1 [0078.462] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x1c010847) returned 0x0 [0078.462] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0078.462] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0078.462] SystemParametersInfoW (in: uiAction=0x100a, uiParam=0x0, pvParam=0x14e248, fWinIni=0x0 | out: pvParam=0x14e248) returned 1 [0078.462] SendMessageW (hWnd=0x201ca, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0078.462] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x127, wParam=0x30001, lParam=0x0) returned 0x0 [0078.462] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0078.462] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x301e0, Msg=0x128, wParam=0x30001, lParam=0x0) returned 0x0 [0078.462] RedrawWindow (hWnd=0x301e0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0078.462] RedrawWindow (hWnd=0x201ca, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x85) returned 1 [0078.462] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0078.462] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0078.462] GetCurrentObject (hdc=0x1c010847, type=0x1) returned 0x1b00017 [0078.463] GetCurrentObject (hdc=0x1c010847, type=0x2) returned 0x1900010 [0078.463] GetCurrentObject (hdc=0x1c010847, type=0x7) returned 0x29050250 [0078.463] GetCurrentObject (hdc=0x1c010847, type=0x6) returned 0x18a002e [0078.463] SaveDC (hdc=0x1c010847) returned 1 [0078.463] GetTextAlign (hdc=0x1c010847) returned 0x0 [0078.463] GetTextColor (hdc=0x1c010847) returned 0x0 [0078.463] SetTextColor (hdc=0x1c010847, color=0xffffff) returned 0x0 [0078.463] GetCurrentObject (hdc=0x1c010847, type=0x6) returned 0x18a002e [0078.463] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0078.463] SelectObject (hdc=0x1c010847, h=0x200a0899) returned 0x18a002e [0078.463] GetBkMode (hdc=0x1c010847) returned 2 [0078.463] SetBkMode (hdc=0x1c010847, mode=1) returned 2 [0078.463] DrawTextExW (in: hdc=0x1c010847, lpchText="Unrecovered Computer", cchText=20, lprc=0x14e1c8, format=0x100000, lpdtp=0x21ccc30 | out: lpchText="Unrecovered Computer", lprc=0x14e1c8) returned 20 [0078.464] RestoreDC (hdc=0x1c010847, nSavedDC=-1) returned 1 [0078.464] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x1c010847) returned 0x0 [0078.464] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0078.464] BitBlt (hdc=0x5010830, x=0, y=0, cx=174, cy=20, hdcSrc=0x1c010847, x1=0, y1=0, rop=0xcc0020) returned 1 [0078.464] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x1c010847) returned 0x0 [0078.465] SelectPalette (hdc=0x5010830, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0078.465] SelectObject (hdc=0x1c010847, h=0x185000f) returned 0x29050250 [0078.465] DeleteDC (hdc=0x1c010847) returned 1 [0078.465] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0078.465] EndPaint (hWnd=0x301e0, lpPaint=0x14e448) returned 1 [0078.465] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.465] IsWindowUnicode (hWnd=0x201ca) returned 1 [0078.465] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.465] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.465] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0078.465] BeginPaint (in: hWnd=0x201ca, lpPaint=0x14e4e8 | out: lpPaint=0x14e4e8) returned 0xb010256 [0078.465] GetWindowPlacement (in: hWnd=0x201ca, lpwndpl=0x14e008 | out: lpwndpl=0x14e008) returned 1 [0078.465] GetClientRect (in: hWnd=0x201ca, lpRect=0x14df20 | out: lpRect=0x14df20) returned 1 [0078.465] GetWindowTextLengthW (hWnd=0x201ca) returned 4 [0078.465] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0078.465] GetSystemMetrics (nIndex=42) returned 0 [0078.465] GetWindowTextW (in: hWnd=0x201ca, lpString=0x14dc90, nMaxCount=5 | out: lpString="Info") returned 4 [0078.465] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0xd, wParam=0x5, lParam=0x14dc90) returned 0x4 [0078.465] GetClientRect (in: hWnd=0x201ca, lpRect=0x14dd08 | out: lpRect=0x14dd08) returned 1 [0078.465] GetCurrentObject (hdc=0xb010256, type=0x1) returned 0x1b00017 [0078.465] GetCurrentObject (hdc=0xb010256, type=0x2) returned 0x1900010 [0078.465] GetCurrentObject (hdc=0xb010256, type=0x7) returned 0x6905084e [0078.466] GetCurrentObject (hdc=0xb010256, type=0x6) returned 0x18a002e [0078.466] SaveDC (hdc=0xb010256) returned 1 [0078.466] GetNearestColor (hdc=0xb010256, color=0x0) returned 0x0 [0078.466] CreateSolidBrush (color=0x0) returned 0xffffffff84100860 [0078.466] FillRect (hDC=0xb010256, lprc=0x14d9f8, hbr=0xffffffff84100860) returned 1 [0078.466] DeleteObject (ho=0xffffffff84100860) returned 1 [0078.466] RestoreDC (hdc=0xb010256, nSavedDC=-1) returned 1 [0078.466] SelectPalette (hdc=0xb010256, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0078.466] GetWindowTextLengthW (hWnd=0x201ca) returned 4 [0078.466] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0078.466] GetSystemMetrics (nIndex=42) returned 0 [0078.466] GetWindowTextW (in: hWnd=0x201ca, lpString=0x14e390, nMaxCount=5 | out: lpString="Info") returned 4 [0078.466] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0xd, wParam=0x5, lParam=0x14e390) returned 0x4 [0078.466] SelectPalette (hdc=0xb010256, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0078.466] EndPaint (hWnd=0x201ca, lpPaint=0x14e488) returned 1 [0078.466] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.466] IsWindowUnicode (hWnd=0x301e0) returned 1 [0078.466] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.467] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.467] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0078.467] BeginPaint (in: hWnd=0x301e0, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0x5010830 [0078.467] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x301e0, Msg=0x85, wParam=0x1, lParam=0x0) returned 0x0 [0078.467] SelectPalette (hdc=0x5010830, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0078.467] CreateCompatibleDC (hdc=0x5010830) returned 0x1e010847 [0078.467] SelectObject (hdc=0x1e010847, h=0x29050250) returned 0x185000f [0078.467] GdipCreateFromHDC (hdc=0x1e010847, graphics=0x14e428) returned 0x0 [0078.467] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0078.467] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=174, height=20, combineMode=0x0) returned 0x0 [0078.468] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0078.468] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0078.468] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14e4b8) returned 0x0 [0078.468] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.468] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0078.468] LocalFree (hMem=0xa931f0) returned 0x0 [0078.468] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0078.468] GdipCreateRegion (region=0x14e450) returned 0x0 [0078.468] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0078.468] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0078.468] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0078.468] GetWindowTextLengthW (hWnd=0x301e0) returned 20 [0078.468] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x301e0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x14 [0078.468] GetSystemMetrics (nIndex=42) returned 0 [0078.468] GetWindowTextW (in: hWnd=0x301e0, lpString=0x14e330, nMaxCount=21 | out: lpString="Unrecovered Computer") returned 20 [0078.468] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x301e0, Msg=0xd, wParam=0x15, lParam=0x14e330) returned 0x14 [0078.468] GetClientRect (in: hWnd=0x301e0, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0078.468] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0078.468] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0078.468] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0078.468] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0078.468] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0078.468] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.469] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0078.469] LocalFree (hMem=0xa931f0) returned 0x0 [0078.469] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0078.469] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.469] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0078.469] LocalFree (hMem=0xa931f0) returned 0x0 [0078.469] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0078.469] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0078.469] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0078.469] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0078.469] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0078.469] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0078.469] GetCurrentObject (hdc=0x1e010847, type=0x1) returned 0x1b00017 [0078.469] GetCurrentObject (hdc=0x1e010847, type=0x2) returned 0x1900010 [0078.469] GetCurrentObject (hdc=0x1e010847, type=0x7) returned 0x29050250 [0078.469] GetCurrentObject (hdc=0x1e010847, type=0x6) returned 0x18a002e [0078.469] SaveDC (hdc=0x1e010847) returned 1 [0078.469] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff89040763 [0078.469] GetClipRgn (hdc=0x1e010847, hrgn=0xffffffff89040763) returned 0 [0078.469] SelectClipRgn (hdc=0x1e010847, hrgn=0xffffffff92040872) returned 2 [0078.470] DeleteObject (ho=0xffffffff89040763) returned 1 [0078.470] DeleteObject (ho=0xffffffff92040872) returned 1 [0078.470] OffsetViewportOrgEx (in: hdc=0x1e010847, x=0, y=0, lppt=0x21cd818 | out: lppt=0x21cd818) returned 1 [0078.470] GetNearestColor (hdc=0x1e010847, color=0x0) returned 0x0 [0078.470] CreateSolidBrush (color=0x0) returned 0xffffffff85100860 [0078.470] FillRect (hDC=0x1e010847, lprc=0x14e1e8, hbr=0xffffffff85100860) returned 1 [0078.470] DeleteObject (ho=0xffffffff85100860) returned 1 [0078.470] RestoreDC (hdc=0x1e010847, nSavedDC=-1) returned 1 [0078.470] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x1e010847) returned 0x0 [0078.470] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd600dbd) returned 0x0 [0078.470] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0078.470] GetWindowTextLengthW (hWnd=0x301e0) returned 20 [0078.470] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x301e0, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x14 [0078.470] GetSystemMetrics (nIndex=42) returned 0 [0078.470] GetWindowTextW (in: hWnd=0x301e0, lpString=0x14e330, nMaxCount=21 | out: lpString="Unrecovered Computer") returned 20 [0078.470] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x301e0, Msg=0xd, wParam=0x15, lParam=0x14e330) returned 0x14 [0078.470] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0078.470] GetCurrentObject (hdc=0x1e010847, type=0x1) returned 0x1b00017 [0078.470] GetCurrentObject (hdc=0x1e010847, type=0x2) returned 0x1900010 [0078.470] GetCurrentObject (hdc=0x1e010847, type=0x7) returned 0x29050250 [0078.470] GetCurrentObject (hdc=0x1e010847, type=0x6) returned 0x18a002e [0078.470] SaveDC (hdc=0x1e010847) returned 1 [0078.471] GetNearestColor (hdc=0x1e010847, color=0xffffff) returned 0xffffff [0078.471] RestoreDC (hdc=0x1e010847, nSavedDC=-1) returned 1 [0078.471] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x1e010847) returned 0x0 [0078.471] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0078.471] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0078.471] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0078.471] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0078.471] GetCurrentObject (hdc=0x1e010847, type=0x1) returned 0x1b00017 [0078.471] GetCurrentObject (hdc=0x1e010847, type=0x2) returned 0x1900010 [0078.471] GetCurrentObject (hdc=0x1e010847, type=0x7) returned 0x29050250 [0078.471] GetCurrentObject (hdc=0x1e010847, type=0x6) returned 0x18a002e [0078.471] SaveDC (hdc=0x1e010847) returned 1 [0078.471] GetTextAlign (hdc=0x1e010847) returned 0x0 [0078.471] GetTextColor (hdc=0x1e010847) returned 0x0 [0078.471] SetTextColor (hdc=0x1e010847, color=0xffffff) returned 0x0 [0078.471] GetCurrentObject (hdc=0x1e010847, type=0x6) returned 0x18a002e [0078.472] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0078.472] SelectObject (hdc=0x1e010847, h=0x200a0899) returned 0x18a002e [0078.472] GetBkMode (hdc=0x1e010847) returned 2 [0078.472] SetBkMode (hdc=0x1e010847, mode=1) returned 2 [0078.472] DrawTextExW (in: hdc=0x1e010847, lpchText="Unrecovered Computer", cchText=20, lprc=0x14e1c8, format=0x100000, lpdtp=0x21ce1b0 | out: lpchText="Unrecovered Computer", lprc=0x14e1c8) returned 20 [0078.472] RestoreDC (hdc=0x1e010847, nSavedDC=-1) returned 1 [0078.472] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x1e010847) returned 0x0 [0078.472] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0078.472] BitBlt (hdc=0x5010830, x=0, y=0, cx=174, cy=20, hdcSrc=0x1e010847, x1=0, y1=0, rop=0xcc0020) returned 1 [0078.472] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x1e010847) returned 0x0 [0078.472] SelectPalette (hdc=0x5010830, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0078.472] SelectObject (hdc=0x1e010847, h=0x185000f) returned 0x29050250 [0078.472] DeleteDC (hdc=0x1e010847) returned 1 [0078.472] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0078.473] EndPaint (hWnd=0x301e0, lpPaint=0x14e448) returned 1 [0078.473] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.473] IsWindowUnicode (hWnd=0x301ee) returned 1 [0078.473] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.473] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.473] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0078.474] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0078.474] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0078.474] CoTaskMemFree (pv=0xa692f0) [0078.474] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0078.474] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0078.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0078.474] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.474] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0078.474] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0078.474] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e500) returned 1 [0078.474] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0078.475] GetFileType (hFile=0x270) returned 0x1 [0078.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e470) returned 1 [0078.475] GetFileType (hFile=0x270) returned 0x1 [0078.475] ReadFile (in: hFile=0x270, lpBuffer=0x21cfd10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x21cfd10*, lpNumberOfBytesRead=0x14e5d8*=0x2, lpOverlapped=0x0) returned 1 [0078.475] ReadFile (in: hFile=0x270, lpBuffer=0x21cfd10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x21cfd10*, lpNumberOfBytesRead=0x14e5d8*=0x0, lpOverlapped=0x0) returned 1 [0078.475] CloseHandle (hObject=0x270) returned 1 [0078.476] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0078.476] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0078.476] CoTaskMemFree (pv=0xa692f0) [0078.476] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0078.476] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0078.476] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0078.477] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0078.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0078.477] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0078.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e4c0) returned 1 [0078.477] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0078.478] GetFileType (hFile=0x270) returned 0x1 [0078.478] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e430) returned 1 [0078.478] GetFileType (hFile=0x270) returned 0x1 [0078.478] WriteFile (in: hFile=0x270, lpBuffer=0x21d3060*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x14e508, lpOverlapped=0x0 | out: lpBuffer=0x21d3060*, lpNumberOfBytesWritten=0x14e508*=0x2, lpOverlapped=0x0) returned 1 [0078.479] CloseHandle (hObject=0x270) returned 1 [0078.480] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0078.480] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0078.480] GetSystemMetrics (nIndex=42) returned 0 [0078.480] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e600, nMaxCount=5 | out: lpString="4:51") returned 4 [0078.480] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e600) returned 0x4 [0078.480] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0078.480] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0078.480] GetSystemMetrics (nIndex=42) returned 0 [0078.480] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e5a0, nMaxCount=5 | out: lpString="4:51") returned 4 [0078.480] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e5a0) returned 0x4 [0078.480] SetWindowTextW (hWnd=0x201da, lpString="4:50") returned 1 [0078.480] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xc, wParam=0x0, lParam=0x21d0d84) returned 0x1 [0078.480] GetStockObject (i=5) returned 0x1900015 [0078.480] GetDlgItem (hDlg=0x401fa, nIDDlgItem=131546) returned 0x201da [0078.480] SendMessageW (hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0078.480] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0078.480] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0078.481] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0078.481] GetSystemMetrics (nIndex=42) returned 0 [0078.481] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e460, nMaxCount=5 | out: lpString="4:50") returned 4 [0078.481] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e460) returned 0x4 [0078.481] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0078.481] AdjustWindowRectEx (in: lpRect=0x14e478, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e478) returned 1 [0078.481] DrawTextExW (in: hdc=0x8010893, lpchText="4:50", cchText=4, lprc=0x14e3e8, format=0x2400, lpdtp=0x21d4318 | out: lpchText="4:50", lprc=0x14e3e8) returned 20 [0078.481] InvalidateRect (hWnd=0x201da, lpRect=0x0, bErase=1) returned 1 [0078.481] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0078.481] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0078.481] GetSystemMetrics (nIndex=42) returned 0 [0078.481] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14e3d0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0078.481] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14e3d0) returned 0xc [0078.481] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.481] IsWindowUnicode (hWnd=0x201da) returned 1 [0078.481] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.481] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.481] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0078.481] BeginPaint (in: hWnd=0x201da, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0xb010256 [0078.481] SelectPalette (hdc=0xb010256, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0078.482] CreateCompatibleDC (hdc=0xb010256) returned 0x20010847 [0078.482] SelectObject (hdc=0x20010847, h=0x29050250) returned 0x185000f [0078.482] GdipCreateFromHDC (hdc=0x20010847, graphics=0x14e428) returned 0x0 [0078.482] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0078.482] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=40, height=20, combineMode=0x0) returned 0x0 [0078.482] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0078.482] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0078.482] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14e4b8) returned 0x0 [0078.482] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.482] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0078.482] LocalFree (hMem=0xa931f0) returned 0x0 [0078.482] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0078.483] GdipCreateRegion (region=0x14e450) returned 0x0 [0078.483] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0078.483] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0078.483] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0078.483] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0078.483] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0078.483] GetSystemMetrics (nIndex=42) returned 0 [0078.483] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:50") returned 4 [0078.483] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0078.484] GetClientRect (in: hWnd=0x201da, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0078.484] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0078.484] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0078.484] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0078.484] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0078.484] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0078.484] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.484] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0078.484] LocalFree (hMem=0xa931f0) returned 0x0 [0078.484] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0078.484] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0078.484] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0078.484] LocalFree (hMem=0xa931f0) returned 0x0 [0078.484] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0078.484] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0078.484] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0078.485] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0078.485] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0078.485] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0078.485] GetCurrentObject (hdc=0x20010847, type=0x1) returned 0x1b00017 [0078.485] GetCurrentObject (hdc=0x20010847, type=0x2) returned 0x1900010 [0078.485] GetCurrentObject (hdc=0x20010847, type=0x7) returned 0x29050250 [0078.485] GetCurrentObject (hdc=0x20010847, type=0x6) returned 0x18a002e [0078.485] SaveDC (hdc=0x20010847) returned 1 [0078.485] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff93040872 [0078.485] GetClipRgn (hdc=0x20010847, hrgn=0xffffffff93040872) returned 0 [0078.485] SelectClipRgn (hdc=0x20010847, hrgn=0xffffffff8c040763) returned 2 [0078.485] DeleteObject (ho=0xffffffff93040872) returned 1 [0078.485] DeleteObject (ho=0xffffffff8c040763) returned 1 [0078.485] OffsetViewportOrgEx (in: hdc=0x20010847, x=0, y=0, lppt=0x21d4a18 | out: lppt=0x21d4a18) returned 1 [0078.485] GetNearestColor (hdc=0x20010847, color=0xa0) returned 0xa0 [0078.485] CreateSolidBrush (color=0xa0) returned 0xffffffff86100860 [0078.486] FillRect (hDC=0x20010847, lprc=0x14e1e8, hbr=0xffffffff86100860) returned 1 [0078.486] DeleteObject (ho=0xffffffff86100860) returned 1 [0078.486] RestoreDC (hdc=0x20010847, nSavedDC=-1) returned 1 [0078.486] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x20010847) returned 0x0 [0078.486] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd5e0dbd) returned 0x0 [0078.486] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0078.486] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0078.486] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0078.486] GetSystemMetrics (nIndex=42) returned 0 [0078.486] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:50") returned 4 [0078.486] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0078.486] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0078.486] GetCurrentObject (hdc=0x20010847, type=0x1) returned 0x1b00017 [0078.486] GetCurrentObject (hdc=0x20010847, type=0x2) returned 0x1900010 [0078.486] GetCurrentObject (hdc=0x20010847, type=0x7) returned 0x29050250 [0078.486] GetCurrentObject (hdc=0x20010847, type=0x6) returned 0x18a002e [0078.486] SaveDC (hdc=0x20010847) returned 1 [0078.486] GetNearestColor (hdc=0x20010847, color=0xffffff) returned 0xffffff [0078.486] RestoreDC (hdc=0x20010847, nSavedDC=-1) returned 1 [0078.486] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x20010847) returned 0x0 [0078.487] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0078.487] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0078.487] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0078.487] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0078.487] GetCurrentObject (hdc=0x20010847, type=0x1) returned 0x1b00017 [0078.487] GetCurrentObject (hdc=0x20010847, type=0x2) returned 0x1900010 [0078.487] GetCurrentObject (hdc=0x20010847, type=0x7) returned 0x29050250 [0078.487] GetCurrentObject (hdc=0x20010847, type=0x6) returned 0x18a002e [0078.487] SaveDC (hdc=0x20010847) returned 1 [0078.487] GetTextAlign (hdc=0x20010847) returned 0x0 [0078.487] GetTextColor (hdc=0x20010847) returned 0x0 [0078.487] SetTextColor (hdc=0x20010847, color=0xffffff) returned 0x0 [0078.487] GetCurrentObject (hdc=0x20010847, type=0x6) returned 0x18a002e [0078.487] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0078.487] SelectObject (hdc=0x20010847, h=0x200a0899) returned 0x18a002e [0078.487] GetBkMode (hdc=0x20010847) returned 2 [0078.487] SetBkMode (hdc=0x20010847, mode=1) returned 2 [0078.487] DrawTextExW (in: hdc=0x20010847, lpchText="4:50", cchText=4, lprc=0x14e1c8, format=0x0, lpdtp=0x21d52a8 | out: lpchText="4:50", lprc=0x14e1c8) returned 20 [0078.488] RestoreDC (hdc=0x20010847, nSavedDC=-1) returned 1 [0078.488] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x20010847) returned 0x0 [0078.488] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0078.488] BitBlt (hdc=0xb010256, x=0, y=0, cx=40, cy=20, hdcSrc=0x20010847, x1=0, y1=0, rop=0xcc0020) returned 1 [0078.488] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x20010847) returned 0x0 [0078.488] SelectPalette (hdc=0xb010256, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0078.488] SelectObject (hdc=0x20010847, h=0x185000f) returned 0x29050250 [0078.488] DeleteDC (hdc=0x20010847) returned 1 [0078.488] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0078.488] EndPaint (hWnd=0x201da, lpPaint=0x14e448) returned 1 [0078.488] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0078.488] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0078.488] WaitMessage () returned 1 [0078.530] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.530] IsWindowUnicode (hWnd=0x201c8) returned 1 [0078.530] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.530] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.530] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0078.562] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0078.562] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0078.562] WaitMessage () returned 1 [0078.639] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.639] IsWindowUnicode (hWnd=0x201c8) returned 1 [0078.639] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.639] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.639] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0078.639] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0078.639] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0078.639] WaitMessage () returned 1 [0078.748] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.748] IsWindowUnicode (hWnd=0x201e6) returned 1 [0078.748] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.748] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.748] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0078.748] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.748] IsWindowUnicode (hWnd=0x201c8) returned 1 [0078.748] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.748] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.748] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0078.748] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0078.748] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0078.748] WaitMessage () returned 1 [0078.857] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.857] IsWindowUnicode (hWnd=0x201c8) returned 1 [0078.857] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.857] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.857] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0078.857] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0078.857] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0078.857] WaitMessage () returned 1 [0078.970] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.970] IsWindowUnicode (hWnd=0x201c8) returned 1 [0078.970] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0078.970] TranslateMessage (lpMsg=0x14edb0) returned 0 [0078.970] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0078.970] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0078.970] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0078.970] WaitMessage () returned 1 [0079.076] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0079.076] IsWindowUnicode (hWnd=0x201c8) returned 1 [0079.076] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0079.076] TranslateMessage (lpMsg=0x14edb0) returned 0 [0079.076] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0079.076] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0079.076] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0079.076] WaitMessage () returned 1 [0079.185] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0079.185] IsWindowUnicode (hWnd=0x201c8) returned 1 [0079.185] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0079.185] TranslateMessage (lpMsg=0x14edb0) returned 0 [0079.185] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0079.185] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0079.185] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0079.185] WaitMessage () returned 1 [0079.295] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0079.295] IsWindowUnicode (hWnd=0x201c8) returned 1 [0079.296] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0079.296] TranslateMessage (lpMsg=0x14edb0) returned 0 [0079.296] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0079.296] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0079.296] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0079.296] WaitMessage () returned 1 [0079.361] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0079.361] IsWindowUnicode (hWnd=0x301ee) returned 1 [0079.361] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0079.361] TranslateMessage (lpMsg=0x14edb0) returned 0 [0079.361] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0079.362] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0079.362] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0079.362] CoTaskMemFree (pv=0xa692f0) [0079.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0079.362] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0079.362] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0079.363] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0079.363] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0079.363] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e500) returned 1 [0079.363] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0079.363] GetFileType (hFile=0x270) returned 0x1 [0079.363] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e470) returned 1 [0079.363] GetFileType (hFile=0x270) returned 0x1 [0079.363] ReadFile (in: hFile=0x270, lpBuffer=0x21d7000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x21d7000*, lpNumberOfBytesRead=0x14e5d8*=0x2, lpOverlapped=0x0) returned 1 [0079.363] ReadFile (in: hFile=0x270, lpBuffer=0x21d7000, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x21d7000*, lpNumberOfBytesRead=0x14e5d8*=0x0, lpOverlapped=0x0) returned 1 [0079.364] CloseHandle (hObject=0x270) returned 1 [0079.365] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0079.365] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0079.365] CoTaskMemFree (pv=0xa692f0) [0079.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0079.365] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0079.365] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0079.365] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0079.365] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0079.366] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0079.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e4c0) returned 1 [0079.366] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x270 [0079.367] GetFileType (hFile=0x270) returned 0x1 [0079.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e430) returned 1 [0079.367] GetFileType (hFile=0x270) returned 0x1 [0079.367] WriteFile (in: hFile=0x270, lpBuffer=0x21da350*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x14e508, lpOverlapped=0x0 | out: lpBuffer=0x21da350*, lpNumberOfBytesWritten=0x14e508*=0x2, lpOverlapped=0x0) returned 1 [0079.368] CloseHandle (hObject=0x270) returned 1 [0079.369] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0079.369] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0079.369] GetSystemMetrics (nIndex=42) returned 0 [0079.369] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e600, nMaxCount=5 | out: lpString="4:50") returned 4 [0079.369] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e600) returned 0x4 [0079.369] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0079.369] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0079.369] GetSystemMetrics (nIndex=42) returned 0 [0079.369] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e5a0, nMaxCount=5 | out: lpString="4:50") returned 4 [0079.369] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e5a0) returned 0x4 [0079.369] SetWindowTextW (hWnd=0x201da, lpString="4:49") returned 1 [0079.369] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xc, wParam=0x0, lParam=0x21d8074) returned 0x1 [0079.369] GetStockObject (i=5) returned 0x1900015 [0079.370] GetDlgItem (hDlg=0x401fa, nIDDlgItem=131546) returned 0x201da [0079.370] SendMessageW (hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0079.370] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0079.370] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0079.370] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0079.370] GetSystemMetrics (nIndex=42) returned 0 [0079.370] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e460, nMaxCount=5 | out: lpString="4:49") returned 4 [0079.370] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e460) returned 0x4 [0079.370] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0079.370] AdjustWindowRectEx (in: lpRect=0x14e478, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e478) returned 1 [0079.371] DrawTextExW (in: hdc=0x8010893, lpchText="4:49", cchText=4, lprc=0x14e3e8, format=0x2400, lpdtp=0x21db5e0 | out: lpchText="4:49", lprc=0x14e3e8) returned 20 [0079.371] InvalidateRect (hWnd=0x201da, lpRect=0x0, bErase=1) returned 1 [0079.371] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0079.371] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0079.371] GetSystemMetrics (nIndex=42) returned 0 [0079.371] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14e3d0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0079.371] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14e3d0) returned 0xc [0079.371] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0079.371] IsWindowUnicode (hWnd=0x201da) returned 1 [0079.371] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0079.371] TranslateMessage (lpMsg=0x14edb0) returned 0 [0079.371] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0079.371] BeginPaint (in: hWnd=0x201da, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0xb010256 [0079.387] SelectPalette (hdc=0xb010256, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0079.387] CreateCompatibleDC (hdc=0xb010256) returned 0x21010847 [0079.387] SelectObject (hdc=0x21010847, h=0x29050250) returned 0x185000f [0079.387] GdipCreateFromHDC (hdc=0x21010847, graphics=0x14e428) returned 0x0 [0079.387] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0079.387] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=40, height=20, combineMode=0x0) returned 0x0 [0079.387] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0079.387] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0079.388] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14e4b8) returned 0x0 [0079.388] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0079.388] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0079.388] LocalFree (hMem=0xa931f0) returned 0x0 [0079.388] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0079.388] GdipCreateRegion (region=0x14e450) returned 0x0 [0079.388] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0079.388] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0079.388] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0079.388] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0079.388] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0079.388] GetSystemMetrics (nIndex=42) returned 0 [0079.388] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:49") returned 4 [0079.388] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0079.388] GetClientRect (in: hWnd=0x201da, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0079.389] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0079.389] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0079.389] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0079.389] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0079.389] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0079.389] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0079.389] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0079.389] LocalFree (hMem=0xa931f0) returned 0x0 [0079.389] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0079.389] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0079.389] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0079.389] LocalFree (hMem=0xa931f0) returned 0x0 [0079.389] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0079.389] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0079.389] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0079.389] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0079.390] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0079.390] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0079.390] GetCurrentObject (hdc=0x21010847, type=0x1) returned 0x1b00017 [0079.390] GetCurrentObject (hdc=0x21010847, type=0x2) returned 0x1900010 [0079.390] GetCurrentObject (hdc=0x21010847, type=0x7) returned 0x29050250 [0079.390] GetCurrentObject (hdc=0x21010847, type=0x6) returned 0x18a002e [0079.390] SaveDC (hdc=0x21010847) returned 1 [0079.390] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8d040763 [0079.390] GetClipRgn (hdc=0x21010847, hrgn=0xffffffff8d040763) returned 0 [0079.390] SelectClipRgn (hdc=0x21010847, hrgn=0xffffffff96040872) returned 2 [0079.390] DeleteObject (ho=0xffffffff8d040763) returned 1 [0079.390] DeleteObject (ho=0xffffffff96040872) returned 1 [0079.390] OffsetViewportOrgEx (in: hdc=0x21010847, x=0, y=0, lppt=0x21dbce0 | out: lppt=0x21dbce0) returned 1 [0079.390] GetNearestColor (hdc=0x21010847, color=0xa0) returned 0xa0 [0079.391] CreateSolidBrush (color=0xa0) returned 0xffffffff87100860 [0079.391] FillRect (hDC=0x21010847, lprc=0x14e1e8, hbr=0xffffffff87100860) returned 1 [0079.391] DeleteObject (ho=0xffffffff87100860) returned 1 [0079.391] RestoreDC (hdc=0x21010847, nSavedDC=-1) returned 1 [0079.391] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x21010847) returned 0x0 [0079.391] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd5c0dbd) returned 0x0 [0079.391] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0079.391] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0079.391] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0079.391] GetSystemMetrics (nIndex=42) returned 0 [0079.391] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:49") returned 4 [0079.391] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0079.391] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0079.391] GetCurrentObject (hdc=0x21010847, type=0x1) returned 0x1b00017 [0079.391] GetCurrentObject (hdc=0x21010847, type=0x2) returned 0x1900010 [0079.392] GetCurrentObject (hdc=0x21010847, type=0x7) returned 0x29050250 [0079.392] GetCurrentObject (hdc=0x21010847, type=0x6) returned 0x18a002e [0079.392] SaveDC (hdc=0x21010847) returned 1 [0079.392] GetNearestColor (hdc=0x21010847, color=0xffffff) returned 0xffffff [0079.392] RestoreDC (hdc=0x21010847, nSavedDC=-1) returned 1 [0079.392] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x21010847) returned 0x0 [0079.392] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0079.392] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0079.392] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0079.392] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0079.392] GetCurrentObject (hdc=0x21010847, type=0x1) returned 0x1b00017 [0079.392] GetCurrentObject (hdc=0x21010847, type=0x2) returned 0x1900010 [0079.393] GetCurrentObject (hdc=0x21010847, type=0x7) returned 0x29050250 [0079.393] GetCurrentObject (hdc=0x21010847, type=0x6) returned 0x18a002e [0079.393] SaveDC (hdc=0x21010847) returned 1 [0079.393] GetTextAlign (hdc=0x21010847) returned 0x0 [0079.393] GetTextColor (hdc=0x21010847) returned 0x0 [0079.393] SetTextColor (hdc=0x21010847, color=0xffffff) returned 0x0 [0079.393] GetCurrentObject (hdc=0x21010847, type=0x6) returned 0x18a002e [0079.393] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0079.393] SelectObject (hdc=0x21010847, h=0x200a0899) returned 0x18a002e [0079.393] GetBkMode (hdc=0x21010847) returned 2 [0079.393] SetBkMode (hdc=0x21010847, mode=1) returned 2 [0079.393] DrawTextExW (in: hdc=0x21010847, lpchText="4:49", cchText=4, lprc=0x14e1c8, format=0x0, lpdtp=0x21dc570 | out: lpchText="4:49", lprc=0x14e1c8) returned 20 [0079.394] RestoreDC (hdc=0x21010847, nSavedDC=-1) returned 1 [0079.394] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x21010847) returned 0x0 [0079.394] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0079.394] BitBlt (hdc=0xb010256, x=0, y=0, cx=40, cy=20, hdcSrc=0x21010847, x1=0, y1=0, rop=0xcc0020) returned 1 [0079.394] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x21010847) returned 0x0 [0079.394] SelectPalette (hdc=0xb010256, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0079.394] SelectObject (hdc=0x21010847, h=0x185000f) returned 0x29050250 [0079.394] DeleteDC (hdc=0x21010847) returned 1 [0079.394] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0079.394] EndPaint (hWnd=0x201da, lpPaint=0x14e448) returned 1 [0079.394] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0079.394] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0079.395] WaitMessage () returned 1 [0079.403] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0079.403] IsWindowUnicode (hWnd=0x201c8) returned 1 [0079.403] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0079.403] TranslateMessage (lpMsg=0x14edb0) returned 0 [0079.403] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0079.403] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0079.403] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0079.404] WaitMessage () returned 1 [0079.512] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0079.512] IsWindowUnicode (hWnd=0x201c8) returned 1 [0079.512] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0079.512] TranslateMessage (lpMsg=0x14edb0) returned 0 [0079.512] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0079.512] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0079.513] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0079.513] WaitMessage () returned 1 [0079.621] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0079.622] IsWindowUnicode (hWnd=0x201c8) returned 1 [0079.622] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0079.622] TranslateMessage (lpMsg=0x14edb0) returned 0 [0079.622] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0079.622] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0079.622] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0079.622] WaitMessage () returned 1 [0079.731] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0079.731] IsWindowUnicode (hWnd=0x201c8) returned 1 [0079.731] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0079.731] TranslateMessage (lpMsg=0x14edb0) returned 0 [0079.731] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0079.731] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0079.731] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0079.731] WaitMessage () returned 1 [0079.840] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0079.840] IsWindowUnicode (hWnd=0x201c8) returned 1 [0079.840] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0079.840] TranslateMessage (lpMsg=0x14edb0) returned 0 [0079.840] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0079.840] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0079.840] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0079.840] WaitMessage () returned 1 [0079.949] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0079.951] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x84, wParam=0x0, lParam=0x1ff02b8) returned 0x1 [0079.951] IsWindowUnicode (hWnd=0x401fa) returned 1 [0079.951] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0079.951] TranslateMessage (lpMsg=0x14edb0) returned 0 [0079.951] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0079.951] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0079.951] InvalidateRect (hWnd=0x1020c, lpRect=0x0, bErase=0) returned 1 [0079.951] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0079.951] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x84, wParam=0x0, lParam=0x1ff02b8) returned 0x1 [0079.951] IsWindowUnicode (hWnd=0x401fa) returned 1 [0079.951] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0079.951] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x84, wParam=0x0, lParam=0x1ff02b8) returned 0x1 [0079.951] SetCursor (hCursor=0x10003) returned 0x10003 [0079.952] TranslateMessage (lpMsg=0x14edb0) returned 0 [0079.952] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0079.952] _TrackMouseEvent (in: lpEventTrack=0x218fcb8 | out: lpEventTrack=0x218fcb8) returned 1 [0079.952] SendMessageW (hWnd=0x401fa, Msg=0xc12f, wParam=0x0, lParam=0x0) returned 0x0 [0079.952] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xc12f, wParam=0x0, lParam=0x0) returned 0x0 [0079.952] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x200, wParam=0x0, lParam=0x1320111) returned 0x0 [0079.952] GetKeyState (nVirtKey=1) returned 0 [0079.952] GetKeyState (nVirtKey=2) returned 0 [0079.952] GetKeyState (nVirtKey=4) returned 0 [0079.952] GetKeyState (nVirtKey=5) returned 0 [0079.952] GetKeyState (nVirtKey=6) returned 0 [0079.952] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0079.952] IsWindowUnicode (hWnd=0x1020c) returned 1 [0079.952] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0079.952] TranslateMessage (lpMsg=0x14edb0) returned 0 [0079.952] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0079.952] BeginPaint (in: hWnd=0x1020c, lpPaint=0x14e478 | out: lpPaint=0x14e478) returned 0x5010825 [0079.952] SelectPalette (hdc=0x5010825, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0079.952] CreateCompatibleDC (hdc=0x5010825) returned 0x23010847 [0079.952] SelectObject (hdc=0x23010847, h=0x29050250) returned 0x185000f [0079.952] GdipCreateFromHDC (hdc=0x23010847, graphics=0x14e3f8) returned 0x0 [0079.953] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0079.953] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=408, height=23, combineMode=0x0) returned 0x0 [0079.953] GdipCreateMatrix (matrix=0x14e420) returned 0x0 [0079.953] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0079.953] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14e488) returned 0x0 [0079.953] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0079.953] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0079.953] LocalFree (hMem=0xa931f0) returned 0x0 [0079.953] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0079.953] GdipCreateRegion (region=0x14e420) returned 0x0 [0079.953] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0079.953] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e480) returned 0x0 [0079.953] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e520) returned 0x0 [0079.953] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd5a0dbd) returned 0x0 [0079.953] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0079.953] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e198) returned 0x0 [0079.953] GetCurrentObject (hdc=0x23010847, type=0x1) returned 0x1b00017 [0079.953] GetCurrentObject (hdc=0x23010847, type=0x2) returned 0x1900010 [0079.953] GetCurrentObject (hdc=0x23010847, type=0x7) returned 0x29050250 [0079.953] GetCurrentObject (hdc=0x23010847, type=0x6) returned 0x18a002e [0079.953] SaveDC (hdc=0x23010847) returned 1 [0079.954] GetNearestColor (hdc=0x23010847, color=0xa0) returned 0xa0 [0079.954] GetNearestColor (hdc=0x23010847, color=0x35) returned 0x35 [0079.954] GetNearestColor (hdc=0x23010847, color=0x0) returned 0x0 [0079.954] GetNearestColor (hdc=0x23010847, color=0x4848e5) returned 0x4848e5 [0079.954] GetNearestColor (hdc=0x23010847, color=0x0) returned 0x0 [0079.954] GetNearestColor (hdc=0x23010847, color=0x5151ff) returned 0x5151ff [0079.954] GetNearestColor (hdc=0x23010847, color=0x4848e5) returned 0x4848e5 [0079.954] GetNearestColor (hdc=0x23010847, color=0xc0) returned 0xc0 [0079.954] GetNearestColor (hdc=0x23010847, color=0x0) returned 0x0 [0079.954] RestoreDC (hdc=0x23010847, nSavedDC=-1) returned 1 [0079.954] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x23010847) returned 0x0 [0079.954] IsAppThemed () returned 0x1 [0079.954] GetThemeAppProperties () returned 0x3 [0079.954] GetThemeAppProperties () returned 0x3 [0079.954] IsAppThemed () returned 0x1 [0079.954] GetThemeAppProperties () returned 0x3 [0079.954] GetThemeAppProperties () returned 0x3 [0079.954] SelectObject (hdc=0x8010893, h=0x120a086d) returned 0x200a0899 [0079.954] DrawTextExW (in: hdc=0x8010893, lpchText="Check", cchText=5, lprc=0x14de08, format=0x2415, lpdtp=0x21dd238 | out: lpchText="Check", lprc=0x14de08) returned 13 [0079.955] IsAppThemed () returned 0x1 [0079.955] GetThemeAppProperties () returned 0x3 [0079.955] GetThemeAppProperties () returned 0x3 [0079.955] IsAppThemed () returned 0x1 [0079.955] GetThemeAppProperties () returned 0x3 [0079.955] GetThemeAppProperties () returned 0x3 [0079.955] GetFocus () returned 0x201ca [0079.955] IsAppThemed () returned 0x1 [0079.955] GetThemeAppProperties () returned 0x3 [0079.955] GetThemeAppProperties () returned 0x3 [0079.955] IsAppThemed () returned 0x1 [0079.955] GetThemeAppProperties () returned 0x3 [0079.955] GetThemeAppProperties () returned 0x3 [0079.955] IsThemePartDefined () returned 0x1 [0079.955] IsAppThemed () returned 0x1 [0079.955] GetThemeAppProperties () returned 0x3 [0079.955] GetThemeAppProperties () returned 0x3 [0079.955] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0079.955] IsAppThemed () returned 0x1 [0079.955] GetThemeAppProperties () returned 0x3 [0079.955] GetThemeAppProperties () returned 0x3 [0079.955] IsAppThemed () returned 0x1 [0079.955] GetThemeAppProperties () returned 0x3 [0079.955] GetThemeAppProperties () returned 0x3 [0079.955] IsThemePartDefined () returned 0x1 [0079.955] GdipCreateRegion (region=0x14df00) returned 0x0 [0079.955] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0079.955] GdipCreateMatrix (matrix=0x14df00) returned 0x0 [0079.955] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0079.955] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14df68) returned 0x0 [0079.955] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0079.955] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0079.956] LocalFree (hMem=0xa931f0) returned 0x0 [0079.956] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0079.956] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0079.956] LocalFree (hMem=0xa931f0) returned 0x0 [0079.956] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0079.956] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14dfd0) returned 0x0 [0079.956] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df90) returned 0x0 [0079.956] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df90) returned 0x0 [0079.956] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0079.956] GdipGetDC (graphics=0x1afd81d0, hdc=0x14dfd8) returned 0x0 [0079.956] GetCurrentObject (hdc=0x23010847, type=0x1) returned 0x1b00017 [0079.956] GetCurrentObject (hdc=0x23010847, type=0x2) returned 0x1900010 [0079.956] GetCurrentObject (hdc=0x23010847, type=0x7) returned 0x29050250 [0079.956] GetCurrentObject (hdc=0x23010847, type=0x6) returned 0x18a002e [0079.956] SaveDC (hdc=0x23010847) returned 1 [0079.956] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff97040872 [0079.956] GetClipRgn (hdc=0x23010847, hrgn=0xffffffff97040872) returned 0 [0079.956] SelectClipRgn (hdc=0x23010847, hrgn=0xffffffff90040763) returned 2 [0079.956] DeleteObject (ho=0xffffffff97040872) returned 1 [0079.956] DeleteObject (ho=0xffffffff90040763) returned 1 [0079.957] OffsetViewportOrgEx (in: hdc=0x23010847, x=0, y=0, lppt=0x21ddc20 | out: lppt=0x21ddc20) returned 1 [0079.957] DrawThemeParentBackground () returned 0x0 [0079.957] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14db88 | out: lpwndpl=0x14db88) returned 1 [0079.957] GetClientRect (in: hWnd=0x401fa, lpRect=0x14daa0 | out: lpRect=0x14daa0) returned 1 [0079.957] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0079.957] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0079.957] GetSystemMetrics (nIndex=42) returned 0 [0079.957] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d800, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0079.957] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d800) returned 0xc [0079.957] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d888 | out: lpRect=0x14d888) returned 1 [0079.957] GetCurrentObject (hdc=0x23010847, type=0x1) returned 0x1b00017 [0079.957] GetCurrentObject (hdc=0x23010847, type=0x2) returned 0x1900010 [0079.957] GetCurrentObject (hdc=0x23010847, type=0x7) returned 0x29050250 [0079.957] GetCurrentObject (hdc=0x23010847, type=0x6) returned 0x18a002e [0079.958] SaveDC (hdc=0x23010847) returned 2 [0079.958] GetNearestColor (hdc=0x23010847, color=0xa0) returned 0xa0 [0079.958] CreateSolidBrush (color=0xa0) returned 0xffffffff88100860 [0079.958] FillRect (hDC=0x23010847, lprc=0x14d578, hbr=0xffffffff88100860) returned 1 [0079.958] DeleteObject (ho=0xffffffff88100860) returned 1 [0079.958] RestoreDC (hdc=0x23010847, nSavedDC=-1) returned 1 [0079.958] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0079.958] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0079.958] GetSystemMetrics (nIndex=42) returned 0 [0079.958] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0079.958] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0079.958] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d7b8 | out: lpRect=0x14d7b8) returned 1 [0079.958] GetCurrentObject (hdc=0x23010847, type=0x1) returned 0x1b00017 [0079.958] GetCurrentObject (hdc=0x23010847, type=0x2) returned 0x1900010 [0079.958] GetCurrentObject (hdc=0x23010847, type=0x7) returned 0x29050250 [0079.958] GetCurrentObject (hdc=0x23010847, type=0x6) returned 0x18a002e [0079.958] SaveDC (hdc=0x23010847) returned 2 [0079.958] GetNearestColor (hdc=0x23010847, color=0xa0) returned 0xa0 [0079.959] CreateSolidBrush (color=0xa0) returned 0xffffffff89100860 [0079.959] FillRect (hDC=0x23010847, lprc=0x14d4a8, hbr=0xffffffff89100860) returned 1 [0079.959] DeleteObject (ho=0xffffffff89100860) returned 1 [0079.959] RestoreDC (hdc=0x23010847, nSavedDC=-1) returned 1 [0079.959] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0079.959] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0079.959] GetSystemMetrics (nIndex=42) returned 0 [0079.959] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0079.959] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0079.959] RestoreDC (hdc=0x23010847, nSavedDC=-1) returned 1 [0079.959] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x23010847) returned 0x0 [0079.959] IsAppThemed () returned 0x1 [0079.959] GetThemeAppProperties () returned 0x3 [0079.959] GetThemeAppProperties () returned 0x3 [0079.959] IsAppThemed () returned 0x1 [0079.959] GetThemeAppProperties () returned 0x3 [0079.959] GetThemeAppProperties () returned 0x3 [0079.959] IsThemePartDefined () returned 0x1 [0079.959] GdipCreateRegion (region=0x14dea0) returned 0x0 [0079.959] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0079.959] GdipCreateMatrix (matrix=0x14dea0) returned 0x0 [0079.959] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0079.959] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14df08) returned 0x0 [0079.959] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0079.960] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0079.960] LocalFree (hMem=0xa931f0) returned 0x0 [0079.960] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0079.960] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0079.960] LocalFree (hMem=0xa931f0) returned 0x0 [0079.960] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0079.960] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df70) returned 0x0 [0079.960] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df30) returned 0x0 [0079.960] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df30) returned 0x0 [0079.960] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0079.960] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df78) returned 0x0 [0079.960] GetCurrentObject (hdc=0x23010847, type=0x1) returned 0x1b00017 [0079.960] GetCurrentObject (hdc=0x23010847, type=0x2) returned 0x1900010 [0079.960] GetCurrentObject (hdc=0x23010847, type=0x7) returned 0x29050250 [0079.960] GetCurrentObject (hdc=0x23010847, type=0x6) returned 0x18a002e [0079.960] SaveDC (hdc=0x23010847) returned 1 [0079.960] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff91040763 [0079.960] GetClipRgn (hdc=0x23010847, hrgn=0xffffffff91040763) returned 0 [0079.960] SelectClipRgn (hdc=0x23010847, hrgn=0xffffffff99040872) returned 2 [0079.960] DeleteObject (ho=0xffffffff91040763) returned 1 [0079.960] DeleteObject (ho=0xffffffff99040872) returned 1 [0079.961] OffsetViewportOrgEx (in: hdc=0x23010847, x=0, y=0, lppt=0x21dea28 | out: lppt=0x21dea28) returned 1 [0079.961] IsAppThemed () returned 0x1 [0079.961] GetThemeAppProperties () returned 0x3 [0079.961] GetThemeAppProperties () returned 0x3 [0079.961] DrawThemeBackground () returned 0x0 [0079.961] RestoreDC (hdc=0x23010847, nSavedDC=-1) returned 1 [0079.961] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x23010847) returned 0x0 [0079.961] GdipCreateRegion (region=0x14de90) returned 0x0 [0079.961] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0079.961] GdipCreateMatrix (matrix=0x14de90) returned 0x0 [0079.961] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0079.961] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14def8) returned 0x0 [0079.961] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0079.961] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0079.961] LocalFree (hMem=0xa931f0) returned 0x0 [0079.961] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0079.961] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0079.961] LocalFree (hMem=0xa931f0) returned 0x0 [0079.961] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0079.961] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df60) returned 0x0 [0079.961] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df20) returned 0x0 [0079.961] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df20) returned 0x0 [0079.962] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0079.962] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df68) returned 0x0 [0079.962] GetCurrentObject (hdc=0x23010847, type=0x1) returned 0x1b00017 [0079.962] GetCurrentObject (hdc=0x23010847, type=0x2) returned 0x1900010 [0079.962] GetCurrentObject (hdc=0x23010847, type=0x7) returned 0x29050250 [0079.962] GetCurrentObject (hdc=0x23010847, type=0x6) returned 0x18a002e [0079.962] SaveDC (hdc=0x23010847) returned 1 [0079.962] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff9a040872 [0079.962] GetClipRgn (hdc=0x23010847, hrgn=0xffffffff9a040872) returned 0 [0079.962] SelectClipRgn (hdc=0x23010847, hrgn=0xffffffff92040763) returned 2 [0079.962] DeleteObject (ho=0xffffffff9a040872) returned 1 [0079.962] DeleteObject (ho=0xffffffff92040763) returned 1 [0079.962] OffsetViewportOrgEx (in: hdc=0x23010847, x=0, y=0, lppt=0x21def00 | out: lppt=0x21def00) returned 1 [0079.962] IsAppThemed () returned 0x1 [0079.962] GetThemeAppProperties () returned 0x3 [0079.962] GetThemeAppProperties () returned 0x3 [0079.962] GetThemeBackgroundContentRect () returned 0x0 [0079.962] RestoreDC (hdc=0x23010847, nSavedDC=-1) returned 1 [0079.962] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x23010847) returned 0x0 [0079.962] IsAppThemed () returned 0x1 [0079.962] GetThemeAppProperties () returned 0x3 [0079.962] GetThemeAppProperties () returned 0x3 [0079.962] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e148) returned 0x0 [0079.962] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e128) returned 0x0 [0079.963] GetCurrentObject (hdc=0x23010847, type=0x1) returned 0x1b00017 [0079.963] GetCurrentObject (hdc=0x23010847, type=0x2) returned 0x1900010 [0079.963] GetCurrentObject (hdc=0x23010847, type=0x7) returned 0x29050250 [0079.963] GetCurrentObject (hdc=0x23010847, type=0x6) returned 0x18a002e [0079.963] SaveDC (hdc=0x23010847) returned 1 [0079.963] GetTextAlign (hdc=0x23010847) returned 0x0 [0079.963] GetTextColor (hdc=0x23010847) returned 0x0 [0079.963] GetCurrentObject (hdc=0x23010847, type=0x6) returned 0x18a002e [0079.963] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dc60 | out: pv=0x14dc60) returned 92 [0079.963] SelectObject (hdc=0x23010847, h=0x120a086d) returned 0x18a002e [0079.963] GetBkMode (hdc=0x23010847) returned 2 [0079.963] SetBkMode (hdc=0x23010847, mode=1) returned 2 [0079.963] DrawTextExW (in: hdc=0x23010847, lpchText="Check", cchText=5, lprc=0x14dea0, format=0x2415, lpdtp=0x21df4e0 | out: lpchText="Check", lprc=0x14dea0) returned 13 [0079.963] DrawTextExW (in: hdc=0x23010847, lpchText="Check", cchText=5, lprc=0x14e0b8, format=0x2015, lpdtp=0x21df4e0 | out: lpchText="Check", lprc=0x14e0b8) returned 13 [0079.963] RestoreDC (hdc=0x23010847, nSavedDC=-1) returned 1 [0079.963] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x23010847) returned 0x0 [0079.963] GetFocus () returned 0x201ca [0079.963] IsAppThemed () returned 0x1 [0079.963] GetThemeAppProperties () returned 0x3 [0079.963] GetThemeAppProperties () returned 0x3 [0079.963] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e438) returned 0x0 [0079.963] BitBlt (hdc=0x5010825, x=0, y=0, cx=408, cy=23, hdcSrc=0x23010847, x1=0, y1=0, rop=0xcc0020) returned 1 [0079.964] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x23010847) returned 0x0 [0079.964] SelectPalette (hdc=0x5010825, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0079.964] SelectObject (hdc=0x23010847, h=0x185000f) returned 0x29050250 [0079.964] DeleteDC (hdc=0x23010847) returned 1 [0079.964] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0079.964] EndPaint (hWnd=0x1020c, lpPaint=0x14e418) returned 1 [0079.964] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0079.964] IsWindowUnicode (hWnd=0x201c8) returned 1 [0079.964] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0079.964] TranslateMessage (lpMsg=0x14edb0) returned 0 [0079.964] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0079.964] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0079.964] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0079.964] WaitMessage () returned 1 [0080.058] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.058] IsWindowUnicode (hWnd=0x401fa) returned 1 [0080.058] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.058] TranslateMessage (lpMsg=0x14edb0) returned 0 [0080.058] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0080.058] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.058] IsWindowUnicode (hWnd=0x401fa) returned 1 [0080.058] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.058] TranslateMessage (lpMsg=0x14edb0) returned 0 [0080.058] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0080.058] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x2a1, wParam=0x0, lParam=0x1320111) returned 0x0 [0080.059] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.059] IsWindowUnicode (hWnd=0x201c8) returned 1 [0080.059] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.059] TranslateMessage (lpMsg=0x14edb0) returned 0 [0080.059] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0080.059] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0080.059] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0080.059] WaitMessage () returned 1 [0080.169] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.169] IsWindowUnicode (hWnd=0x201c8) returned 1 [0080.169] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.169] TranslateMessage (lpMsg=0x14edb0) returned 0 [0080.169] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0080.169] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0080.169] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0080.169] WaitMessage () returned 1 [0080.277] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.277] IsWindowUnicode (hWnd=0x201c8) returned 1 [0080.277] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.277] TranslateMessage (lpMsg=0x14edb0) returned 0 [0080.277] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0080.277] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0080.277] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0080.277] WaitMessage () returned 1 [0080.370] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.370] IsWindowUnicode (hWnd=0x301ee) returned 1 [0080.370] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.370] TranslateMessage (lpMsg=0x14edb0) returned 0 [0080.370] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0080.371] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0080.371] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0080.371] CoTaskMemFree (pv=0xa692f0) [0080.371] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0080.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0080.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0080.372] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0080.372] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0080.372] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e500) returned 1 [0080.372] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x274 [0080.372] GetFileType (hFile=0x274) returned 0x1 [0080.372] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e470) returned 1 [0080.372] GetFileType (hFile=0x274) returned 0x1 [0080.372] ReadFile (in: hFile=0x274, lpBuffer=0x21e1220, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x21e1220*, lpNumberOfBytesRead=0x14e5d8*=0x2, lpOverlapped=0x0) returned 1 [0080.372] ReadFile (in: hFile=0x274, lpBuffer=0x21e1220, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x21e1220*, lpNumberOfBytesRead=0x14e5d8*=0x0, lpOverlapped=0x0) returned 1 [0080.372] CloseHandle (hObject=0x274) returned 1 [0080.373] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0080.373] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0080.373] CoTaskMemFree (pv=0xa692f0) [0080.373] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0080.373] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0080.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0080.374] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0080.374] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0080.374] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0080.374] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e4c0) returned 1 [0080.374] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x274 [0080.375] GetFileType (hFile=0x274) returned 0x1 [0080.375] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e430) returned 1 [0080.375] GetFileType (hFile=0x274) returned 0x1 [0080.375] WriteFile (in: hFile=0x274, lpBuffer=0x21e4570*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x14e508, lpOverlapped=0x0 | out: lpBuffer=0x21e4570*, lpNumberOfBytesWritten=0x14e508*=0x2, lpOverlapped=0x0) returned 1 [0080.375] CloseHandle (hObject=0x274) returned 1 [0080.380] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0080.380] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0080.380] GetSystemMetrics (nIndex=42) returned 0 [0080.380] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e600, nMaxCount=5 | out: lpString="4:49") returned 4 [0080.380] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e600) returned 0x4 [0080.380] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0080.381] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0080.381] GetSystemMetrics (nIndex=42) returned 0 [0080.381] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e5a0, nMaxCount=5 | out: lpString="4:49") returned 4 [0080.381] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e5a0) returned 0x4 [0080.381] SetWindowTextW (hWnd=0x201da, lpString="4:48") returned 1 [0080.381] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xc, wParam=0x0, lParam=0x21e2294) returned 0x1 [0080.381] GetStockObject (i=5) returned 0x1900015 [0080.381] GetDlgItem (hDlg=0x401fa, nIDDlgItem=131546) returned 0x201da [0080.381] SendMessageW (hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0080.381] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0080.381] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0080.381] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0080.381] GetSystemMetrics (nIndex=42) returned 0 [0080.381] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e460, nMaxCount=5 | out: lpString="4:48") returned 4 [0080.382] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e460) returned 0x4 [0080.382] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0080.382] AdjustWindowRectEx (in: lpRect=0x14e478, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e478) returned 1 [0080.382] SelectObject (hdc=0x8010893, h=0x200a0899) returned 0x120a086d [0080.382] DrawTextExW (in: hdc=0x8010893, lpchText="4:48", cchText=4, lprc=0x14e3e8, format=0x2400, lpdtp=0x21e5828 | out: lpchText="4:48", lprc=0x14e3e8) returned 20 [0080.382] InvalidateRect (hWnd=0x201da, lpRect=0x0, bErase=1) returned 1 [0080.382] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0080.382] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0080.382] GetSystemMetrics (nIndex=42) returned 0 [0080.382] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14e3d0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0080.382] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14e3d0) returned 0xc [0080.383] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.383] IsWindowUnicode (hWnd=0x201da) returned 1 [0080.383] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.383] TranslateMessage (lpMsg=0x14edb0) returned 0 [0080.383] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0080.383] BeginPaint (in: hWnd=0x201da, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0xb010256 [0080.383] SelectPalette (hdc=0xb010256, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0080.383] CreateCompatibleDC (hdc=0xb010256) returned 0x24010847 [0080.383] SelectObject (hdc=0x24010847, h=0x29050250) returned 0x185000f [0080.383] GdipCreateFromHDC (hdc=0x24010847, graphics=0x14e428) returned 0x0 [0080.383] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0080.383] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=40, height=20, combineMode=0x0) returned 0x0 [0080.383] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0080.383] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0080.383] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14e4b8) returned 0x0 [0080.383] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0080.383] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0080.383] LocalFree (hMem=0xa931f0) returned 0x0 [0080.383] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0080.383] GdipCreateRegion (region=0x14e450) returned 0x0 [0080.384] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0080.384] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0080.384] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0080.384] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0080.384] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0080.384] GetSystemMetrics (nIndex=42) returned 0 [0080.384] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:48") returned 4 [0080.384] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0080.384] GetClientRect (in: hWnd=0x201da, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0080.384] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0080.384] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0080.384] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0080.384] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0080.384] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0080.384] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0080.384] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0080.384] LocalFree (hMem=0xa931f0) returned 0x0 [0080.384] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0080.384] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0080.384] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0080.384] LocalFree (hMem=0xa931f0) returned 0x0 [0080.384] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0080.384] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0080.384] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0080.385] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0080.385] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0080.385] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0080.385] GetCurrentObject (hdc=0x24010847, type=0x1) returned 0x1b00017 [0080.385] GetCurrentObject (hdc=0x24010847, type=0x2) returned 0x1900010 [0080.385] GetCurrentObject (hdc=0x24010847, type=0x7) returned 0x29050250 [0080.385] GetCurrentObject (hdc=0x24010847, type=0x6) returned 0x18a002e [0080.385] SaveDC (hdc=0x24010847) returned 1 [0080.385] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff93040763 [0080.385] GetClipRgn (hdc=0x24010847, hrgn=0xffffffff93040763) returned 0 [0080.385] SelectClipRgn (hdc=0x24010847, hrgn=0xffffffff9e040872) returned 2 [0080.385] DeleteObject (ho=0xffffffff93040763) returned 1 [0080.385] DeleteObject (ho=0xffffffff9e040872) returned 1 [0080.385] OffsetViewportOrgEx (in: hdc=0x24010847, x=0, y=0, lppt=0x21e5f28 | out: lppt=0x21e5f28) returned 1 [0080.385] GetNearestColor (hdc=0x24010847, color=0xa0) returned 0xa0 [0080.385] CreateSolidBrush (color=0xa0) returned 0xffffffff8a100860 [0080.385] FillRect (hDC=0x24010847, lprc=0x14e1e8, hbr=0xffffffff8a100860) returned 1 [0080.395] DeleteObject (ho=0xffffffff8a100860) returned 1 [0080.395] RestoreDC (hdc=0x24010847, nSavedDC=-1) returned 1 [0080.395] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x24010847) returned 0x0 [0080.395] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd580dbd) returned 0x0 [0080.395] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0080.395] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0080.395] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0080.395] GetSystemMetrics (nIndex=42) returned 0 [0080.395] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:48") returned 4 [0080.395] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0080.395] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0080.395] GetCurrentObject (hdc=0x24010847, type=0x1) returned 0x1b00017 [0080.395] GetCurrentObject (hdc=0x24010847, type=0x2) returned 0x1900010 [0080.395] GetCurrentObject (hdc=0x24010847, type=0x7) returned 0x29050250 [0080.395] GetCurrentObject (hdc=0x24010847, type=0x6) returned 0x18a002e [0080.395] SaveDC (hdc=0x24010847) returned 1 [0080.395] GetNearestColor (hdc=0x24010847, color=0xffffff) returned 0xffffff [0080.395] RestoreDC (hdc=0x24010847, nSavedDC=-1) returned 1 [0080.395] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x24010847) returned 0x0 [0080.396] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0080.396] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0080.396] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0080.396] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0080.396] GetCurrentObject (hdc=0x24010847, type=0x1) returned 0x1b00017 [0080.396] GetCurrentObject (hdc=0x24010847, type=0x2) returned 0x1900010 [0080.396] GetCurrentObject (hdc=0x24010847, type=0x7) returned 0x29050250 [0080.396] GetCurrentObject (hdc=0x24010847, type=0x6) returned 0x18a002e [0080.396] SaveDC (hdc=0x24010847) returned 1 [0080.396] GetTextAlign (hdc=0x24010847) returned 0x0 [0080.396] GetTextColor (hdc=0x24010847) returned 0x0 [0080.396] SetTextColor (hdc=0x24010847, color=0xffffff) returned 0x0 [0080.396] GetCurrentObject (hdc=0x24010847, type=0x6) returned 0x18a002e [0080.396] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0080.396] SelectObject (hdc=0x24010847, h=0x200a0899) returned 0x18a002e [0080.396] GetBkMode (hdc=0x24010847) returned 2 [0080.397] SetBkMode (hdc=0x24010847, mode=1) returned 2 [0080.397] DrawTextExW (in: hdc=0x24010847, lpchText="4:48", cchText=4, lprc=0x14e1c8, format=0x0, lpdtp=0x21e67b8 | out: lpchText="4:48", lprc=0x14e1c8) returned 20 [0080.397] RestoreDC (hdc=0x24010847, nSavedDC=-1) returned 1 [0080.397] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x24010847) returned 0x0 [0080.397] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0080.397] BitBlt (hdc=0xb010256, x=0, y=0, cx=40, cy=20, hdcSrc=0x24010847, x1=0, y1=0, rop=0xcc0020) returned 1 [0080.397] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x24010847) returned 0x0 [0080.397] SelectPalette (hdc=0xb010256, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0080.397] SelectObject (hdc=0x24010847, h=0x185000f) returned 0x29050250 [0080.397] DeleteDC (hdc=0x24010847) returned 1 [0080.397] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0080.397] EndPaint (hWnd=0x201da, lpPaint=0x14e448) returned 1 [0080.397] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.397] IsWindowUnicode (hWnd=0x201c8) returned 1 [0080.397] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.397] TranslateMessage (lpMsg=0x14edb0) returned 0 [0080.397] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0080.397] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0080.397] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0080.398] WaitMessage () returned 1 [0080.495] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.495] IsWindowUnicode (hWnd=0x201c8) returned 1 [0080.495] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.495] TranslateMessage (lpMsg=0x14edb0) returned 0 [0080.495] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0080.495] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0080.495] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0080.495] WaitMessage () returned 1 [0080.604] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.604] IsWindowUnicode (hWnd=0x201c8) returned 1 [0080.604] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.604] TranslateMessage (lpMsg=0x14edb0) returned 0 [0080.604] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0080.604] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0080.604] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0080.604] WaitMessage () returned 1 [0080.663] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0080.663] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0080.663] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0080.663] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0080.663] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401e4, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0080.664] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301a2, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0080.664] NtdllDefWindowProc_W (hWnd=0x40120, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0080.664] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0080.664] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0080.664] WaitMessage () returned 1 [0080.714] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.714] IsWindowUnicode (hWnd=0x201c8) returned 1 [0080.714] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.714] TranslateMessage (lpMsg=0x14edb0) returned 0 [0080.714] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0080.714] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0080.714] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0080.714] WaitMessage () returned 1 [0080.777] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.778] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x27e033e) returned 0x1 [0080.778] IsWindowUnicode (hWnd=0x1020c) returned 1 [0080.778] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.778] TranslateMessage (lpMsg=0x14edb0) returned 0 [0080.778] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0080.778] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0080.778] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.778] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x27e033e) returned 0x1 [0080.778] IsWindowUnicode (hWnd=0x1020c) returned 1 [0080.778] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.778] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x27e033e) returned 0x1 [0080.778] SetCursor (hCursor=0x10003) returned 0x10003 [0080.778] TranslateMessage (lpMsg=0x14edb0) returned 0 [0080.778] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0080.778] _TrackMouseEvent (in: lpEventTrack=0x214a8d0 | out: lpEventTrack=0x214a8d0) returned 1 [0080.778] SendMessageW (hWnd=0x1020c, Msg=0xc12f, wParam=0x0, lParam=0x0) returned 0x0 [0080.778] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0xc12f, wParam=0x0, lParam=0x0) returned 0x0 [0080.778] InvalidateRect (hWnd=0x1020c, lpRect=0x0, bErase=0) returned 1 [0080.778] GetKeyState (nVirtKey=1) returned 0 [0080.778] GetKeyState (nVirtKey=2) returned 0 [0080.778] GetKeyState (nVirtKey=4) returned 0 [0080.778] GetKeyState (nVirtKey=5) returned 0 [0080.778] GetKeyState (nVirtKey=6) returned 0 [0080.779] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.779] IsWindowUnicode (hWnd=0x1020c) returned 1 [0080.779] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.779] TranslateMessage (lpMsg=0x14edb0) returned 0 [0080.779] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0080.779] BeginPaint (in: hWnd=0x1020c, lpPaint=0x14e478 | out: lpPaint=0x14e478) returned 0x5010825 [0080.779] SelectPalette (hdc=0x5010825, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0080.779] CreateCompatibleDC (hdc=0x5010825) returned 0x25010847 [0080.779] SelectObject (hdc=0x25010847, h=0x29050250) returned 0x185000f [0080.779] GdipCreateFromHDC (hdc=0x25010847, graphics=0x14e3f8) returned 0x0 [0080.779] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0080.779] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=408, height=23, combineMode=0x0) returned 0x0 [0080.779] GdipCreateMatrix (matrix=0x14e420) returned 0x0 [0080.779] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0080.779] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14e488) returned 0x0 [0080.779] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0080.779] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0080.779] LocalFree (hMem=0xa931f0) returned 0x0 [0080.779] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0080.780] GdipCreateRegion (region=0x14e420) returned 0x0 [0080.780] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0080.780] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e480) returned 0x0 [0080.780] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e520) returned 0x0 [0080.780] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd560dbd) returned 0x0 [0080.780] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0080.780] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e198) returned 0x0 [0080.780] GetCurrentObject (hdc=0x25010847, type=0x1) returned 0x1b00017 [0080.780] GetCurrentObject (hdc=0x25010847, type=0x2) returned 0x1900010 [0080.780] GetCurrentObject (hdc=0x25010847, type=0x7) returned 0x29050250 [0080.780] GetCurrentObject (hdc=0x25010847, type=0x6) returned 0x18a002e [0080.780] SaveDC (hdc=0x25010847) returned 1 [0080.780] GetNearestColor (hdc=0x25010847, color=0xa0) returned 0xa0 [0080.780] GetNearestColor (hdc=0x25010847, color=0x35) returned 0x35 [0080.780] GetNearestColor (hdc=0x25010847, color=0x0) returned 0x0 [0080.780] GetNearestColor (hdc=0x25010847, color=0x4848e5) returned 0x4848e5 [0080.780] GetNearestColor (hdc=0x25010847, color=0x0) returned 0x0 [0080.780] GetNearestColor (hdc=0x25010847, color=0x5151ff) returned 0x5151ff [0080.781] GetNearestColor (hdc=0x25010847, color=0x4848e5) returned 0x4848e5 [0080.781] GetNearestColor (hdc=0x25010847, color=0xc0) returned 0xc0 [0080.781] GetNearestColor (hdc=0x25010847, color=0x0) returned 0x0 [0080.781] RestoreDC (hdc=0x25010847, nSavedDC=-1) returned 1 [0080.781] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x25010847) returned 0x0 [0080.781] IsAppThemed () returned 0x1 [0080.781] GetThemeAppProperties () returned 0x3 [0080.781] GetThemeAppProperties () returned 0x3 [0080.781] IsAppThemed () returned 0x1 [0080.781] GetThemeAppProperties () returned 0x3 [0080.781] GetThemeAppProperties () returned 0x3 [0080.781] SelectObject (hdc=0x8010893, h=0x120a086d) returned 0x200a0899 [0080.781] DrawTextExW (in: hdc=0x8010893, lpchText="Check", cchText=5, lprc=0x14de08, format=0x2415, lpdtp=0x21e7448 | out: lpchText="Check", lprc=0x14de08) returned 13 [0080.781] IsAppThemed () returned 0x1 [0080.781] GetThemeAppProperties () returned 0x3 [0080.781] GetThemeAppProperties () returned 0x3 [0080.781] IsAppThemed () returned 0x1 [0080.781] GetThemeAppProperties () returned 0x3 [0080.781] GetThemeAppProperties () returned 0x3 [0080.781] IsAppThemed () returned 0x1 [0080.781] GetThemeAppProperties () returned 0x3 [0080.781] GetThemeAppProperties () returned 0x3 [0080.781] IsAppThemed () returned 0x1 [0080.781] GetThemeAppProperties () returned 0x3 [0080.781] GetThemeAppProperties () returned 0x3 [0080.782] IsThemePartDefined () returned 0x1 [0080.782] IsAppThemed () returned 0x1 [0080.782] GetThemeAppProperties () returned 0x3 [0080.782] GetThemeAppProperties () returned 0x3 [0080.782] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0080.782] IsAppThemed () returned 0x1 [0080.782] GetThemeAppProperties () returned 0x3 [0080.782] GetThemeAppProperties () returned 0x3 [0080.782] IsAppThemed () returned 0x1 [0080.782] GetThemeAppProperties () returned 0x3 [0080.782] GetThemeAppProperties () returned 0x3 [0080.782] IsThemePartDefined () returned 0x1 [0080.782] GdipCreateRegion (region=0x14df00) returned 0x0 [0080.782] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0080.782] GdipCreateMatrix (matrix=0x14df00) returned 0x0 [0080.782] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0080.782] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14df68) returned 0x0 [0080.782] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0080.782] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0080.782] LocalFree (hMem=0xa931f0) returned 0x0 [0080.782] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0080.782] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0080.782] LocalFree (hMem=0xa931f0) returned 0x0 [0080.782] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0080.782] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14dfd0) returned 0x0 [0080.782] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df90) returned 0x0 [0080.782] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df90) returned 0x0 [0080.783] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0080.783] GdipGetDC (graphics=0x1afd81d0, hdc=0x14dfd8) returned 0x0 [0080.783] GetCurrentObject (hdc=0x25010847, type=0x1) returned 0x1b00017 [0080.783] GetCurrentObject (hdc=0x25010847, type=0x2) returned 0x1900010 [0080.783] GetCurrentObject (hdc=0x25010847, type=0x7) returned 0x29050250 [0080.783] GetCurrentObject (hdc=0x25010847, type=0x6) returned 0x18a002e [0080.783] SaveDC (hdc=0x25010847) returned 1 [0080.783] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff9f040872 [0080.783] GetClipRgn (hdc=0x25010847, hrgn=0xffffffff9f040872) returned 0 [0080.783] SelectClipRgn (hdc=0x25010847, hrgn=0xffffffff96040763) returned 2 [0080.783] DeleteObject (ho=0xffffffff9f040872) returned 1 [0080.783] DeleteObject (ho=0xffffffff96040763) returned 1 [0080.783] OffsetViewportOrgEx (in: hdc=0x25010847, x=0, y=0, lppt=0x21e7e30 | out: lppt=0x21e7e30) returned 1 [0080.783] DrawThemeParentBackground () returned 0x0 [0080.783] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14db88 | out: lpwndpl=0x14db88) returned 1 [0080.783] GetClientRect (in: hWnd=0x401fa, lpRect=0x14daa0 | out: lpRect=0x14daa0) returned 1 [0080.783] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0080.783] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0080.783] GetSystemMetrics (nIndex=42) returned 0 [0080.783] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d800, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0080.783] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d800) returned 0xc [0080.784] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d888 | out: lpRect=0x14d888) returned 1 [0080.784] GetCurrentObject (hdc=0x25010847, type=0x1) returned 0x1b00017 [0080.784] GetCurrentObject (hdc=0x25010847, type=0x2) returned 0x1900010 [0080.784] GetCurrentObject (hdc=0x25010847, type=0x7) returned 0x29050250 [0080.784] GetCurrentObject (hdc=0x25010847, type=0x6) returned 0x18a002e [0080.784] SaveDC (hdc=0x25010847) returned 2 [0080.784] GetNearestColor (hdc=0x25010847, color=0xa0) returned 0xa0 [0080.784] CreateSolidBrush (color=0xa0) returned 0xffffffff8b100860 [0080.784] FillRect (hDC=0x25010847, lprc=0x14d578, hbr=0xffffffff8b100860) returned 1 [0080.784] DeleteObject (ho=0xffffffff8b100860) returned 1 [0080.784] RestoreDC (hdc=0x25010847, nSavedDC=-1) returned 1 [0080.784] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0080.784] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0080.784] GetSystemMetrics (nIndex=42) returned 0 [0080.784] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0080.784] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0080.784] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d7b8 | out: lpRect=0x14d7b8) returned 1 [0080.785] GetCurrentObject (hdc=0x25010847, type=0x1) returned 0x1b00017 [0080.785] GetCurrentObject (hdc=0x25010847, type=0x2) returned 0x1900010 [0080.785] GetCurrentObject (hdc=0x25010847, type=0x7) returned 0x29050250 [0080.785] GetCurrentObject (hdc=0x25010847, type=0x6) returned 0x18a002e [0080.785] SaveDC (hdc=0x25010847) returned 2 [0080.785] GetNearestColor (hdc=0x25010847, color=0xa0) returned 0xa0 [0080.785] CreateSolidBrush (color=0xa0) returned 0xffffffff8c100860 [0080.785] FillRect (hDC=0x25010847, lprc=0x14d4a8, hbr=0xffffffff8c100860) returned 1 [0080.785] DeleteObject (ho=0xffffffff8c100860) returned 1 [0080.785] RestoreDC (hdc=0x25010847, nSavedDC=-1) returned 1 [0080.785] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0080.785] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0080.785] GetSystemMetrics (nIndex=42) returned 0 [0080.785] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0080.785] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0080.785] RestoreDC (hdc=0x25010847, nSavedDC=-1) returned 1 [0080.785] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x25010847) returned 0x0 [0080.785] IsAppThemed () returned 0x1 [0080.785] GetThemeAppProperties () returned 0x3 [0080.785] GetThemeAppProperties () returned 0x3 [0080.786] IsAppThemed () returned 0x1 [0080.786] GetThemeAppProperties () returned 0x3 [0080.786] GetThemeAppProperties () returned 0x3 [0080.786] IsThemePartDefined () returned 0x1 [0080.786] GdipCreateRegion (region=0x14dea0) returned 0x0 [0080.786] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0080.786] GdipCreateMatrix (matrix=0x14dea0) returned 0x0 [0080.786] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0080.786] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14df08) returned 0x0 [0080.786] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0080.786] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0080.786] LocalFree (hMem=0xa931f0) returned 0x0 [0080.786] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0080.786] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0080.786] LocalFree (hMem=0xa931f0) returned 0x0 [0080.786] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0080.786] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df70) returned 0x0 [0080.786] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df30) returned 0x0 [0080.786] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df30) returned 0x0 [0080.786] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0080.786] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df78) returned 0x0 [0080.786] GetCurrentObject (hdc=0x25010847, type=0x1) returned 0x1b00017 [0080.787] GetCurrentObject (hdc=0x25010847, type=0x2) returned 0x1900010 [0080.787] GetCurrentObject (hdc=0x25010847, type=0x7) returned 0x29050250 [0080.787] GetCurrentObject (hdc=0x25010847, type=0x6) returned 0x18a002e [0080.787] SaveDC (hdc=0x25010847) returned 1 [0080.787] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff97040763 [0080.787] GetClipRgn (hdc=0x25010847, hrgn=0xffffffff97040763) returned 0 [0080.787] SelectClipRgn (hdc=0x25010847, hrgn=0xffffffffa1040872) returned 2 [0080.787] DeleteObject (ho=0xffffffff97040763) returned 1 [0080.787] DeleteObject (ho=0xffffffffa1040872) returned 1 [0080.787] OffsetViewportOrgEx (in: hdc=0x25010847, x=0, y=0, lppt=0x21e8c38 | out: lppt=0x21e8c38) returned 1 [0080.787] IsAppThemed () returned 0x1 [0080.787] GetThemeAppProperties () returned 0x3 [0080.787] GetThemeAppProperties () returned 0x3 [0080.787] DrawThemeBackground () returned 0x0 [0080.787] RestoreDC (hdc=0x25010847, nSavedDC=-1) returned 1 [0080.787] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x25010847) returned 0x0 [0080.787] GdipCreateRegion (region=0x14de90) returned 0x0 [0080.787] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0080.787] GdipCreateMatrix (matrix=0x14de90) returned 0x0 [0080.788] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0080.788] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14def8) returned 0x0 [0080.788] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0080.788] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0080.788] LocalFree (hMem=0xa931f0) returned 0x0 [0080.788] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0080.788] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0080.788] LocalFree (hMem=0xa931f0) returned 0x0 [0080.788] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0080.788] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df60) returned 0x0 [0080.788] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df20) returned 0x0 [0080.788] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df20) returned 0x0 [0080.788] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0080.788] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df68) returned 0x0 [0080.788] GetCurrentObject (hdc=0x25010847, type=0x1) returned 0x1b00017 [0080.788] GetCurrentObject (hdc=0x25010847, type=0x2) returned 0x1900010 [0080.788] GetCurrentObject (hdc=0x25010847, type=0x7) returned 0x29050250 [0080.788] GetCurrentObject (hdc=0x25010847, type=0x6) returned 0x18a002e [0080.788] SaveDC (hdc=0x25010847) returned 1 [0080.788] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffa2040872 [0080.788] GetClipRgn (hdc=0x25010847, hrgn=0xffffffffa2040872) returned 0 [0080.788] SelectClipRgn (hdc=0x25010847, hrgn=0xffffffff98040763) returned 2 [0080.789] DeleteObject (ho=0xffffffffa2040872) returned 1 [0080.789] DeleteObject (ho=0xffffffff98040763) returned 1 [0080.789] OffsetViewportOrgEx (in: hdc=0x25010847, x=0, y=0, lppt=0x21e9110 | out: lppt=0x21e9110) returned 1 [0080.789] IsAppThemed () returned 0x1 [0080.789] GetThemeAppProperties () returned 0x3 [0080.789] GetThemeAppProperties () returned 0x3 [0080.789] GetThemeBackgroundContentRect () returned 0x0 [0080.789] RestoreDC (hdc=0x25010847, nSavedDC=-1) returned 1 [0080.789] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x25010847) returned 0x0 [0080.789] IsAppThemed () returned 0x1 [0080.789] GetThemeAppProperties () returned 0x3 [0080.789] GetThemeAppProperties () returned 0x3 [0080.789] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e148) returned 0x0 [0080.789] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e128) returned 0x0 [0080.789] GetCurrentObject (hdc=0x25010847, type=0x1) returned 0x1b00017 [0080.789] GetCurrentObject (hdc=0x25010847, type=0x2) returned 0x1900010 [0080.789] GetCurrentObject (hdc=0x25010847, type=0x7) returned 0x29050250 [0080.789] GetCurrentObject (hdc=0x25010847, type=0x6) returned 0x18a002e [0080.789] SaveDC (hdc=0x25010847) returned 1 [0080.789] GetTextAlign (hdc=0x25010847) returned 0x0 [0080.789] GetTextColor (hdc=0x25010847) returned 0x0 [0080.789] GetCurrentObject (hdc=0x25010847, type=0x6) returned 0x18a002e [0080.789] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dc60 | out: pv=0x14dc60) returned 92 [0080.790] SelectObject (hdc=0x25010847, h=0x120a086d) returned 0x18a002e [0080.790] GetBkMode (hdc=0x25010847) returned 2 [0080.790] SetBkMode (hdc=0x25010847, mode=1) returned 2 [0080.790] DrawTextExW (in: hdc=0x25010847, lpchText="Check", cchText=5, lprc=0x14dea0, format=0x2415, lpdtp=0x21e96f0 | out: lpchText="Check", lprc=0x14dea0) returned 13 [0080.790] DrawTextExW (in: hdc=0x25010847, lpchText="Check", cchText=5, lprc=0x14e0b8, format=0x2015, lpdtp=0x21e96f0 | out: lpchText="Check", lprc=0x14e0b8) returned 13 [0080.790] RestoreDC (hdc=0x25010847, nSavedDC=-1) returned 1 [0080.790] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x25010847) returned 0x0 [0080.790] GetFocus () returned 0x201ca [0080.790] IsAppThemed () returned 0x1 [0080.790] GetThemeAppProperties () returned 0x3 [0080.790] GetThemeAppProperties () returned 0x3 [0080.790] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e438) returned 0x0 [0080.790] BitBlt (hdc=0x5010825, x=0, y=0, cx=408, cy=23, hdcSrc=0x25010847, x1=0, y1=0, rop=0xcc0020) returned 1 [0080.790] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x25010847) returned 0x0 [0080.790] SelectPalette (hdc=0x5010825, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0080.790] SelectObject (hdc=0x25010847, h=0x185000f) returned 0x29050250 [0080.790] DeleteDC (hdc=0x25010847) returned 1 [0080.790] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0080.791] EndPaint (hWnd=0x1020c, lpPaint=0x14e418) returned 1 [0080.791] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0080.791] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0080.791] WaitMessage () returned 1 [0080.823] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.823] IsWindowUnicode (hWnd=0x201c8) returned 1 [0080.823] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.823] TranslateMessage (lpMsg=0x14edb0) returned 0 [0080.823] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0080.823] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0080.823] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0080.823] WaitMessage () returned 1 [0080.885] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.885] IsWindowUnicode (hWnd=0x1020c) returned 1 [0080.885] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.885] TranslateMessage (lpMsg=0x14edb0) returned 0 [0080.885] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0080.885] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.885] IsWindowUnicode (hWnd=0x1020c) returned 1 [0080.885] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.885] TranslateMessage (lpMsg=0x14edb0) returned 0 [0080.885] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0080.885] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x2a1, wParam=0x0, lParam=0x700f3) returned 0x0 [0080.885] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0080.885] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0080.885] WaitMessage () returned 1 [0080.932] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.932] IsWindowUnicode (hWnd=0x201c8) returned 1 [0080.932] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0080.932] TranslateMessage (lpMsg=0x14edb0) returned 0 [0080.932] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0080.932] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0080.932] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0080.932] WaitMessage () returned 1 [0081.055] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.055] IsWindowUnicode (hWnd=0x201c8) returned 1 [0081.055] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.055] TranslateMessage (lpMsg=0x14edb0) returned 0 [0081.055] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0081.055] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0081.055] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0081.055] WaitMessage () returned 1 [0081.152] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.153] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0081.153] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x46, wParam=0x0, lParam=0x14ebf0) returned 0x0 [0081.153] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401e4, Msg=0x46, wParam=0x0, lParam=0x14ebf0) returned 0x0 [0081.153] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401e4, Msg=0x47, wParam=0x0, lParam=0x14ebf0) returned 0x0 [0081.154] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401e4, Msg=0xd, wParam=0x104, lParam=0x1a696f60) returned 0x0 [0081.154] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401e4, Msg=0x83, wParam=0x1, lParam=0x14e550) returned 0x0 [0081.154] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x27e033e) returned 0x1 [0081.154] IsWindowUnicode (hWnd=0x1020c) returned 1 [0081.154] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.154] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x27e033e) returned 0x1 [0081.154] GetDlgItem (hDlg=0x401fa, nIDDlgItem=0) returned 0x0 [0081.154] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x210, wParam=0x201, lParam=0x1b10197) returned 0x0 [0081.154] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x21, wParam=0x401fa, lParam=0x2010001) returned 0x1 [0081.154] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x21, wParam=0x401fa, lParam=0x2010001) returned 0x1 [0081.155] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x86, wParam=0x0, lParam=0x401fa) returned 0x1 [0081.155] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x46, wParam=0x0, lParam=0x14ec10) returned 0x0 [0081.155] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14e7e8 | out: lpwndpl=0x14e7e8) returned 1 [0081.155] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x47, wParam=0x0, lParam=0x14ec10) returned 0x0 [0081.155] GetClientRect (in: hWnd=0x401fa, lpRect=0x14e680 | out: lpRect=0x14e680) returned 1 [0081.155] GetWindowRect (in: hWnd=0x401fa, lpRect=0x14e680 | out: lpRect=0x14e680) returned 1 [0081.156] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0081.156] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0081.156] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0081.156] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x86, wParam=0x1, lParam=0x201ca) returned 0x1 [0081.156] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0081.156] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0081.156] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0081.157] GetFocus () returned 0x201ca [0081.157] SetFocus (hWnd=0x1020c) returned 0x201ca [0081.157] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x8, wParam=0x1020c, lParam=0x0) returned 0x0 [0081.157] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0081.157] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0081.158] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0081.158] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0081.158] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0081.158] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0081.158] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0081.158] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x7, wParam=0x201ca, lParam=0x0) returned 0x0 [0081.158] GetStockObject (i=5) returned 0x1900015 [0081.158] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0081.158] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0xd, wParam=0x6, lParam=0xa84460) returned 0x5 [0081.158] GetDlgItem (hDlg=0x401fa, nIDDlgItem=66060) returned 0x1020c [0081.158] SendMessageW (hWnd=0x1020c, Msg=0x202b, wParam=0x1020c, lParam=0x14dc40) returned 0x0 [0081.158] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x202b, wParam=0x1020c, lParam=0x14dc40) returned 0x0 [0081.158] InvalidateRect (hWnd=0x1020c, lpRect=0x0, bErase=0) returned 1 [0081.159] SetCursor (hCursor=0x10003) returned 0x10003 [0081.159] TranslateMessage (lpMsg=0x14edb0) returned 0 [0081.159] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0081.159] GetKeyState (nVirtKey=1) returned -127 [0081.159] GetKeyState (nVirtKey=2) returned 0 [0081.159] GetKeyState (nVirtKey=4) returned 0 [0081.159] GetKeyState (nVirtKey=5) returned 0 [0081.159] GetKeyState (nVirtKey=6) returned 0 [0081.159] IsWindowVisible (hWnd=0x1020c) returned 1 [0081.159] IsWindowEnabled (hWnd=0x1020c) returned 1 [0081.159] SetFocus (hWnd=0x1020c) returned 0x1020c [0081.159] GetFocus () returned 0x1020c [0081.159] GetFocus () returned 0x1020c [0081.159] GetFocus () returned 0x1020c [0081.159] GetKeyState (nVirtKey=1) returned -127 [0081.159] GetKeyState (nVirtKey=2) returned 0 [0081.159] GetKeyState (nVirtKey=4) returned 0 [0081.159] GetKeyState (nVirtKey=5) returned 0 [0081.159] GetKeyState (nVirtKey=6) returned 0 [0081.159] GetCapture () returned 0x0 [0081.159] SetCapture (hWnd=0x1020c) returned 0x0 [0081.159] GetKeyState (nVirtKey=1) returned -127 [0081.159] GetKeyState (nVirtKey=2) returned 0 [0081.159] GetKeyState (nVirtKey=4) returned 0 [0081.159] GetKeyState (nVirtKey=5) returned 0 [0081.159] GetKeyState (nVirtKey=6) returned 0 [0081.159] NotifyWinEvent (event=0x800a, hwnd=0x1020c, idObject=-4, idChild=0) [0081.159] InvalidateRect (hWnd=0x1020c, lpRect=0x14e6f0, bErase=0) returned 1 [0081.159] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.159] GetMessageA (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.160] TranslateMessage (lpMsg=0x14edb0) returned 0 [0081.160] DispatchMessageA (lpMsg=0x14edb0) returned 0x0 [0081.160] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.160] GetMessageA (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.160] TranslateMessage (lpMsg=0x14edb0) returned 0 [0081.160] DispatchMessageA (lpMsg=0x14edb0) returned 0x0 [0081.160] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.160] IsWindowUnicode (hWnd=0x1020c) returned 1 [0081.160] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.160] TranslateMessage (lpMsg=0x14edb0) returned 0 [0081.160] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0081.160] MapWindowPoints (in: hWndFrom=0x1020c, hWndTo=0x0, lpPoints=0x21e9a50, cPoints=0x1 | out: lpPoints=0x21e9a50) returned 41353803 [0081.160] NotifyWinEvent (event=0x800a, hwnd=0x1020c, idObject=-4, idChild=0) [0081.160] InvalidateRect (hWnd=0x1020c, lpRect=0x14e680, bErase=0) returned 1 [0081.160] UpdateWindow (hWnd=0x1020c) returned 1 [0081.160] BeginPaint (in: hWnd=0x1020c, lpPaint=0x14ddf8 | out: lpPaint=0x14ddf8) returned 0x5010825 [0081.160] SelectPalette (hdc=0x5010825, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0081.160] CreateCompatibleDC (hdc=0x5010825) returned 0x71010880 [0081.160] SelectObject (hdc=0x71010880, h=0x29050250) returned 0x185000f [0081.160] GdipCreateFromHDC (hdc=0x71010880, graphics=0x14dd78) returned 0x0 [0081.160] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0081.160] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=408, height=23, combineMode=0x0) returned 0x0 [0081.160] GdipCreateMatrix (matrix=0x14dda0) returned 0x0 [0081.161] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0081.161] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14de08) returned 0x0 [0081.161] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0081.161] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0081.161] LocalFree (hMem=0xa931f0) returned 0x0 [0081.161] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0081.161] GdipCreateRegion (region=0x14dda0) returned 0x0 [0081.161] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0081.161] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14de00) returned 0x0 [0081.161] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14dea0) returned 0x0 [0081.161] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd540dbd) returned 0x0 [0081.161] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0081.161] GdipGetDC (graphics=0x1afd81d0, hdc=0x14db18) returned 0x0 [0081.161] GetCurrentObject (hdc=0x71010880, type=0x1) returned 0x1b00017 [0081.161] GetCurrentObject (hdc=0x71010880, type=0x2) returned 0x1900010 [0081.161] GetCurrentObject (hdc=0x71010880, type=0x7) returned 0x29050250 [0081.161] GetCurrentObject (hdc=0x71010880, type=0x6) returned 0x18a002e [0081.161] SaveDC (hdc=0x71010880) returned 1 [0081.162] GetNearestColor (hdc=0x71010880, color=0xa0) returned 0xa0 [0081.162] GetNearestColor (hdc=0x71010880, color=0x35) returned 0x35 [0081.162] GetNearestColor (hdc=0x71010880, color=0x0) returned 0x0 [0081.162] GetNearestColor (hdc=0x71010880, color=0x4848e5) returned 0x4848e5 [0081.162] GetNearestColor (hdc=0x71010880, color=0x0) returned 0x0 [0081.162] GetNearestColor (hdc=0x71010880, color=0x5151ff) returned 0x5151ff [0081.162] GetNearestColor (hdc=0x71010880, color=0x4848e5) returned 0x4848e5 [0081.162] GetNearestColor (hdc=0x71010880, color=0xc0) returned 0xc0 [0081.162] GetNearestColor (hdc=0x71010880, color=0x0) returned 0x0 [0081.162] RestoreDC (hdc=0x71010880, nSavedDC=-1) returned 1 [0081.162] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x71010880) returned 0x0 [0081.162] IsAppThemed () returned 0x1 [0081.162] GetThemeAppProperties () returned 0x3 [0081.162] GetThemeAppProperties () returned 0x3 [0081.162] IsAppThemed () returned 0x1 [0081.162] GetThemeAppProperties () returned 0x3 [0081.162] GetThemeAppProperties () returned 0x3 [0081.162] DrawTextExW (in: hdc=0x8010893, lpchText="Check", cchText=5, lprc=0x14d788, format=0x2415, lpdtp=0x21ea578 | out: lpchText="Check", lprc=0x14d788) returned 13 [0081.163] IsAppThemed () returned 0x1 [0081.163] GetThemeAppProperties () returned 0x3 [0081.163] GetThemeAppProperties () returned 0x3 [0081.163] IsAppThemed () returned 0x1 [0081.163] GetThemeAppProperties () returned 0x3 [0081.163] GetThemeAppProperties () returned 0x3 [0081.163] IsAppThemed () returned 0x1 [0081.163] GetThemeAppProperties () returned 0x3 [0081.163] GetThemeAppProperties () returned 0x3 [0081.163] IsAppThemed () returned 0x1 [0081.163] GetThemeAppProperties () returned 0x3 [0081.163] GetThemeAppProperties () returned 0x3 [0081.163] IsThemePartDefined () returned 0x1 [0081.163] IsAppThemed () returned 0x1 [0081.163] GetThemeAppProperties () returned 0x3 [0081.163] GetThemeAppProperties () returned 0x3 [0081.163] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0081.163] IsAppThemed () returned 0x1 [0081.163] GetThemeAppProperties () returned 0x3 [0081.163] GetThemeAppProperties () returned 0x3 [0081.163] IsAppThemed () returned 0x1 [0081.163] GetThemeAppProperties () returned 0x3 [0081.163] GetThemeAppProperties () returned 0x3 [0081.163] IsThemePartDefined () returned 0x1 [0081.163] GdipCreateRegion (region=0x14d880) returned 0x0 [0081.163] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0081.163] GdipCreateMatrix (matrix=0x14d880) returned 0x0 [0081.163] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0081.163] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14d8e8) returned 0x0 [0081.163] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0081.163] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0081.164] LocalFree (hMem=0xa931f0) returned 0x0 [0081.164] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0081.164] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0081.164] LocalFree (hMem=0xa931f0) returned 0x0 [0081.164] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0081.164] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d950) returned 0x0 [0081.164] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d910) returned 0x0 [0081.164] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14d910) returned 0x0 [0081.164] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0081.164] GdipGetDC (graphics=0x1afd81d0, hdc=0x14d958) returned 0x0 [0081.164] GetCurrentObject (hdc=0x71010880, type=0x1) returned 0x1b00017 [0081.164] GetCurrentObject (hdc=0x71010880, type=0x2) returned 0x1900010 [0081.164] GetCurrentObject (hdc=0x71010880, type=0x7) returned 0x29050250 [0081.164] GetCurrentObject (hdc=0x71010880, type=0x6) returned 0x18a002e [0081.164] SaveDC (hdc=0x71010880) returned 1 [0081.164] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8204086f [0081.164] GetClipRgn (hdc=0x71010880, hrgn=0xffffffff8204086f) returned 0 [0081.164] SelectClipRgn (hdc=0x71010880, hrgn=0xffffffffaa040872) returned 2 [0081.164] DeleteObject (ho=0xffffffff8204086f) returned 1 [0081.165] DeleteObject (ho=0xffffffffaa040872) returned 1 [0081.165] OffsetViewportOrgEx (in: hdc=0x71010880, x=0, y=0, lppt=0x21eaf60 | out: lppt=0x21eaf60) returned 1 [0081.165] DrawThemeParentBackground () returned 0x0 [0081.165] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14d508 | out: lpwndpl=0x14d508) returned 1 [0081.165] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d420 | out: lpRect=0x14d420) returned 1 [0081.165] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0081.165] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0081.165] GetSystemMetrics (nIndex=42) returned 0 [0081.165] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d180, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0081.165] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d180) returned 0xc [0081.165] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d208 | out: lpRect=0x14d208) returned 1 [0081.165] GetCurrentObject (hdc=0x71010880, type=0x1) returned 0x1b00017 [0081.165] GetCurrentObject (hdc=0x71010880, type=0x2) returned 0x1900010 [0081.165] GetCurrentObject (hdc=0x71010880, type=0x7) returned 0x29050250 [0081.165] GetCurrentObject (hdc=0x71010880, type=0x6) returned 0x18a002e [0081.165] SaveDC (hdc=0x71010880) returned 2 [0081.165] GetNearestColor (hdc=0x71010880, color=0xa0) returned 0xa0 [0081.165] CreateSolidBrush (color=0xa0) returned 0xffffffff8d100860 [0081.165] FillRect (hDC=0x71010880, lprc=0x14cef8, hbr=0xffffffff8d100860) returned 1 [0081.166] DeleteObject (ho=0xffffffff8d100860) returned 1 [0081.166] RestoreDC (hdc=0x71010880, nSavedDC=-1) returned 1 [0081.166] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0081.166] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0081.166] GetSystemMetrics (nIndex=42) returned 0 [0081.166] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d0b0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0081.166] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d0b0) returned 0xc [0081.166] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d138 | out: lpRect=0x14d138) returned 1 [0081.166] GetCurrentObject (hdc=0x71010880, type=0x1) returned 0x1b00017 [0081.166] GetCurrentObject (hdc=0x71010880, type=0x2) returned 0x1900010 [0081.166] GetCurrentObject (hdc=0x71010880, type=0x7) returned 0x29050250 [0081.166] GetCurrentObject (hdc=0x71010880, type=0x6) returned 0x18a002e [0081.166] SaveDC (hdc=0x71010880) returned 2 [0081.166] GetNearestColor (hdc=0x71010880, color=0xa0) returned 0xa0 [0081.166] CreateSolidBrush (color=0xa0) returned 0xffffffff8e100860 [0081.166] FillRect (hDC=0x71010880, lprc=0x14ce28, hbr=0xffffffff8e100860) returned 1 [0081.166] DeleteObject (ho=0xffffffff8e100860) returned 1 [0081.166] RestoreDC (hdc=0x71010880, nSavedDC=-1) returned 1 [0081.167] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0081.167] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0081.167] GetSystemMetrics (nIndex=42) returned 0 [0081.167] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d0b0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0081.167] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d0b0) returned 0xc [0081.167] RestoreDC (hdc=0x71010880, nSavedDC=-1) returned 1 [0081.167] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x71010880) returned 0x0 [0081.167] IsAppThemed () returned 0x1 [0081.167] GetThemeAppProperties () returned 0x3 [0081.167] GetThemeAppProperties () returned 0x3 [0081.167] IsAppThemed () returned 0x1 [0081.167] GetThemeAppProperties () returned 0x3 [0081.167] GetThemeAppProperties () returned 0x3 [0081.167] IsThemePartDefined () returned 0x1 [0081.167] GdipCreateRegion (region=0x14d820) returned 0x0 [0081.167] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0081.167] GdipCreateMatrix (matrix=0x14d820) returned 0x0 [0081.167] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0081.167] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14d888) returned 0x0 [0081.167] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0081.167] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0081.167] LocalFree (hMem=0xa931f0) returned 0x0 [0081.167] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0081.168] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0081.168] LocalFree (hMem=0xa931f0) returned 0x0 [0081.168] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0081.168] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d8f0) returned 0x0 [0081.168] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d8b0) returned 0x0 [0081.168] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14d8b0) returned 0x0 [0081.168] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0081.168] GdipGetDC (graphics=0x1afd81d0, hdc=0x14d8f8) returned 0x0 [0081.168] GetCurrentObject (hdc=0x71010880, type=0x1) returned 0x1b00017 [0081.168] GetCurrentObject (hdc=0x71010880, type=0x2) returned 0x1900010 [0081.168] GetCurrentObject (hdc=0x71010880, type=0x7) returned 0x29050250 [0081.168] GetCurrentObject (hdc=0x71010880, type=0x6) returned 0x18a002e [0081.168] SaveDC (hdc=0x71010880) returned 1 [0081.168] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffab040872 [0081.168] GetClipRgn (hdc=0x71010880, hrgn=0xffffffffab040872) returned 0 [0081.168] SelectClipRgn (hdc=0x71010880, hrgn=0xffffffff8404086f) returned 2 [0081.168] DeleteObject (ho=0xffffffffab040872) returned 1 [0081.168] DeleteObject (ho=0xffffffff8404086f) returned 1 [0081.168] OffsetViewportOrgEx (in: hdc=0x71010880, x=0, y=0, lppt=0x21ebd68 | out: lppt=0x21ebd68) returned 1 [0081.169] IsAppThemed () returned 0x1 [0081.169] GetThemeAppProperties () returned 0x3 [0081.169] GetThemeAppProperties () returned 0x3 [0081.169] DrawThemeBackground () returned 0x0 [0081.169] RestoreDC (hdc=0x71010880, nSavedDC=-1) returned 1 [0081.169] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x71010880) returned 0x0 [0081.169] GdipCreateRegion (region=0x14d810) returned 0x0 [0081.169] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0081.169] GdipCreateMatrix (matrix=0x14d810) returned 0x0 [0081.169] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0081.169] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14d878) returned 0x0 [0081.169] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0081.169] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0081.169] LocalFree (hMem=0xa931f0) returned 0x0 [0081.169] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0081.169] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0081.169] LocalFree (hMem=0xa931f0) returned 0x0 [0081.169] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0081.169] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d8e0) returned 0x0 [0081.170] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d8a0) returned 0x0 [0081.170] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14d8a0) returned 0x0 [0081.171] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0081.171] GdipGetDC (graphics=0x1afd81d0, hdc=0x14d8e8) returned 0x0 [0081.171] GetCurrentObject (hdc=0x71010880, type=0x1) returned 0x1b00017 [0081.172] GetCurrentObject (hdc=0x71010880, type=0x2) returned 0x1900010 [0081.172] GetCurrentObject (hdc=0x71010880, type=0x7) returned 0x29050250 [0081.173] GetCurrentObject (hdc=0x71010880, type=0x6) returned 0x18a002e [0081.173] SaveDC (hdc=0x71010880) returned 1 [0081.173] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8504086f [0081.173] GetClipRgn (hdc=0x71010880, hrgn=0xffffffff8504086f) returned 0 [0081.173] SelectClipRgn (hdc=0x71010880, hrgn=0xffffffffac040872) returned 2 [0081.173] DeleteObject (ho=0xffffffff8504086f) returned 1 [0081.173] DeleteObject (ho=0xffffffffac040872) returned 1 [0081.173] OffsetViewportOrgEx (in: hdc=0x71010880, x=0, y=0, lppt=0x21ec240 | out: lppt=0x21ec240) returned 1 [0081.173] IsAppThemed () returned 0x1 [0081.173] GetThemeAppProperties () returned 0x3 [0081.173] GetThemeAppProperties () returned 0x3 [0081.173] GetThemeBackgroundContentRect () returned 0x0 [0081.173] RestoreDC (hdc=0x71010880, nSavedDC=-1) returned 1 [0081.179] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x71010880) returned 0x0 [0081.179] IsAppThemed () returned 0x1 [0081.179] GetThemeAppProperties () returned 0x3 [0081.179] GetThemeAppProperties () returned 0x3 [0081.179] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14dac8) returned 0x0 [0081.179] GdipGetDC (graphics=0x1afd81d0, hdc=0x14daa8) returned 0x0 [0081.179] GetCurrentObject (hdc=0x71010880, type=0x1) returned 0x1b00017 [0081.179] GetCurrentObject (hdc=0x71010880, type=0x2) returned 0x1900010 [0081.179] GetCurrentObject (hdc=0x71010880, type=0x7) returned 0x29050250 [0081.179] GetCurrentObject (hdc=0x71010880, type=0x6) returned 0x18a002e [0081.179] SaveDC (hdc=0x71010880) returned 1 [0081.179] GetTextAlign (hdc=0x71010880) returned 0x0 [0081.179] GetTextColor (hdc=0x71010880) returned 0x0 [0081.179] GetCurrentObject (hdc=0x71010880, type=0x6) returned 0x18a002e [0081.179] GetObjectW (in: h=0x18a002e, c=92, pv=0x14d5e0 | out: pv=0x14d5e0) returned 92 [0081.179] SelectObject (hdc=0x71010880, h=0x120a086d) returned 0x18a002e [0081.179] GetBkMode (hdc=0x71010880) returned 2 [0081.179] SetBkMode (hdc=0x71010880, mode=1) returned 2 [0081.179] DrawTextExW (in: hdc=0x71010880, lpchText="Check", cchText=5, lprc=0x14d820, format=0x2415, lpdtp=0x21ec820 | out: lpchText="Check", lprc=0x14d820) returned 13 [0081.180] DrawTextExW (in: hdc=0x71010880, lpchText="Check", cchText=5, lprc=0x14da38, format=0x2015, lpdtp=0x21ec820 | out: lpchText="Check", lprc=0x14da38) returned 13 [0081.180] RestoreDC (hdc=0x71010880, nSavedDC=-1) returned 1 [0081.180] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x71010880) returned 0x0 [0081.180] GetFocus () returned 0x1020c [0081.180] IsAppThemed () returned 0x1 [0081.180] GetThemeAppProperties () returned 0x3 [0081.180] GetThemeAppProperties () returned 0x3 [0081.180] GdipGetDC (graphics=0x1afd81d0, hdc=0x14ddb8) returned 0x0 [0081.180] BitBlt (hdc=0x5010825, x=0, y=0, cx=408, cy=23, hdcSrc=0x71010880, x1=0, y1=0, rop=0xcc0020) returned 1 [0081.180] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x71010880) returned 0x0 [0081.180] SelectPalette (hdc=0x5010825, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0081.180] SelectObject (hdc=0x71010880, h=0x185000f) returned 0x29050250 [0081.180] DeleteDC (hdc=0x71010880) returned 1 [0081.180] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0081.180] EndPaint (hWnd=0x1020c, lpPaint=0x14dd98) returned 1 [0081.180] MapWindowPoints (in: hWndFrom=0x1020c, hWndTo=0x0, lpPoints=0x21ec988, cPoints=0x1 | out: lpPoints=0x21ec988) returned 41353803 [0081.180] WindowFromPoint (Point=0x27e0000033e) returned 0x1020c [0081.180] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x27e033e) returned 0x1 [0081.181] NotifyWinEvent (event=0x800a, hwnd=0x1020c, idObject=-4, idChild=0) [0081.181] NotifyWinEvent (event=0x800c, hwnd=0x1020c, idObject=-4, idChild=0) [0081.181] SetWindowPos (hWnd=0x10214, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0081.181] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x46, wParam=0x0, lParam=0x14e450) returned 0x0 [0081.181] GetCapture () returned 0x1020c [0081.181] ReleaseCapture () returned 1 [0081.181] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0081.181] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.181] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x27e033e) returned 0x1 [0081.181] IsWindowUnicode (hWnd=0x1020c) returned 1 [0081.181] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.181] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x27e033e) returned 0x1 [0081.181] SetCursor (hCursor=0x10003) returned 0x10003 [0081.181] TranslateMessage (lpMsg=0x14edb0) returned 0 [0081.182] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0081.182] GetKeyState (nVirtKey=1) returned 1 [0081.182] GetKeyState (nVirtKey=2) returned 0 [0081.182] GetKeyState (nVirtKey=4) returned 0 [0081.182] GetKeyState (nVirtKey=5) returned 0 [0081.182] GetKeyState (nVirtKey=6) returned 0 [0081.182] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.182] IsWindowUnicode (hWnd=0x201c8) returned 1 [0081.182] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.182] TranslateMessage (lpMsg=0x14edb0) returned 0 [0081.182] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0081.182] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0081.182] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0081.182] WaitMessage () returned 1 [0081.259] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.259] IsWindowUnicode (hWnd=0x201ec) returned 1 [0081.259] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.259] TranslateMessage (lpMsg=0x14edb0) returned 0 [0081.259] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0081.259] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.260] IsWindowUnicode (hWnd=0x201c8) returned 1 [0081.260] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.260] TranslateMessage (lpMsg=0x14edb0) returned 0 [0081.260] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0081.260] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0081.260] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0081.260] WaitMessage () returned 1 [0081.307] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.307] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x84, wParam=0x0, lParam=0x1ff02b8) returned 0x1 [0081.307] IsWindowUnicode (hWnd=0x401fa) returned 1 [0081.307] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.307] TranslateMessage (lpMsg=0x14edb0) returned 0 [0081.307] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0081.307] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0081.307] InvalidateRect (hWnd=0x1020c, lpRect=0x0, bErase=0) returned 1 [0081.307] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.307] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x84, wParam=0x0, lParam=0x1ff02b8) returned 0x1 [0081.307] IsWindowUnicode (hWnd=0x401fa) returned 1 [0081.307] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.307] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x84, wParam=0x0, lParam=0x1ff02b8) returned 0x1 [0081.307] SetCursor (hCursor=0x10003) returned 0x10003 [0081.307] TranslateMessage (lpMsg=0x14edb0) returned 0 [0081.308] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0081.308] _TrackMouseEvent (in: lpEventTrack=0x218fcb8 | out: lpEventTrack=0x218fcb8) returned 1 [0081.308] SendMessageW (hWnd=0x401fa, Msg=0xc12f, wParam=0x0, lParam=0x0) returned 0x0 [0081.308] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xc12f, wParam=0x0, lParam=0x0) returned 0x0 [0081.308] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x200, wParam=0x0, lParam=0x1320111) returned 0x0 [0081.308] GetKeyState (nVirtKey=1) returned 1 [0081.308] GetKeyState (nVirtKey=2) returned 0 [0081.308] GetKeyState (nVirtKey=4) returned 0 [0081.308] GetKeyState (nVirtKey=5) returned 0 [0081.308] GetKeyState (nVirtKey=6) returned 0 [0081.308] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.308] IsWindowUnicode (hWnd=0x1020c) returned 1 [0081.308] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.308] TranslateMessage (lpMsg=0x14edb0) returned 0 [0081.308] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0081.308] BeginPaint (in: hWnd=0x1020c, lpPaint=0x14e478 | out: lpPaint=0x14e478) returned 0x5010825 [0081.308] SelectPalette (hdc=0x5010825, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0081.308] CreateCompatibleDC (hdc=0x5010825) returned 0x73010880 [0081.308] SelectObject (hdc=0x73010880, h=0x29050250) returned 0x185000f [0081.308] GdipCreateFromHDC (hdc=0x73010880, graphics=0x14e3f8) returned 0x0 [0081.308] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0081.308] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=408, height=23, combineMode=0x0) returned 0x0 [0081.308] GdipCreateMatrix (matrix=0x14e420) returned 0x0 [0081.309] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0081.309] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14e488) returned 0x0 [0081.309] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0081.309] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0081.313] LocalFree (hMem=0xa931f0) returned 0x0 [0081.313] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0081.313] GdipCreateRegion (region=0x14e420) returned 0x0 [0081.313] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0081.313] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e480) returned 0x0 [0081.313] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e520) returned 0x0 [0081.314] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd520dbd) returned 0x0 [0081.314] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0081.314] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e198) returned 0x0 [0081.314] GetCurrentObject (hdc=0x73010880, type=0x1) returned 0x1b00017 [0081.314] GetCurrentObject (hdc=0x73010880, type=0x2) returned 0x1900010 [0081.314] GetCurrentObject (hdc=0x73010880, type=0x7) returned 0x29050250 [0081.314] GetCurrentObject (hdc=0x73010880, type=0x6) returned 0x18a002e [0081.314] SaveDC (hdc=0x73010880) returned 1 [0081.314] GetNearestColor (hdc=0x73010880, color=0xa0) returned 0xa0 [0081.314] GetNearestColor (hdc=0x73010880, color=0x35) returned 0x35 [0081.314] GetNearestColor (hdc=0x73010880, color=0x0) returned 0x0 [0081.314] GetNearestColor (hdc=0x73010880, color=0x4848e5) returned 0x4848e5 [0081.314] GetNearestColor (hdc=0x73010880, color=0x0) returned 0x0 [0081.314] GetNearestColor (hdc=0x73010880, color=0x5151ff) returned 0x5151ff [0081.314] GetNearestColor (hdc=0x73010880, color=0x4848e5) returned 0x4848e5 [0081.315] GetNearestColor (hdc=0x73010880, color=0xc0) returned 0xc0 [0081.315] GetNearestColor (hdc=0x73010880, color=0x0) returned 0x0 [0081.315] RestoreDC (hdc=0x73010880, nSavedDC=-1) returned 1 [0081.315] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x73010880) returned 0x0 [0081.315] IsAppThemed () returned 0x1 [0081.315] GetThemeAppProperties () returned 0x3 [0081.315] GetThemeAppProperties () returned 0x3 [0081.315] IsAppThemed () returned 0x1 [0081.315] GetThemeAppProperties () returned 0x3 [0081.315] GetThemeAppProperties () returned 0x3 [0081.315] DrawTextExW (in: hdc=0x8010893, lpchText="Check", cchText=5, lprc=0x14de08, format=0x2415, lpdtp=0x21ed538 | out: lpchText="Check", lprc=0x14de08) returned 13 [0081.315] IsAppThemed () returned 0x1 [0081.315] GetThemeAppProperties () returned 0x3 [0081.315] GetThemeAppProperties () returned 0x3 [0081.315] IsAppThemed () returned 0x1 [0081.315] GetThemeAppProperties () returned 0x3 [0081.315] GetThemeAppProperties () returned 0x3 [0081.315] GetFocus () returned 0x1020c [0081.315] IsAppThemed () returned 0x1 [0081.315] GetThemeAppProperties () returned 0x3 [0081.316] GetThemeAppProperties () returned 0x3 [0081.316] IsAppThemed () returned 0x1 [0081.316] GetThemeAppProperties () returned 0x3 [0081.316] GetThemeAppProperties () returned 0x3 [0081.316] IsThemePartDefined () returned 0x1 [0081.316] IsAppThemed () returned 0x1 [0081.316] GetThemeAppProperties () returned 0x3 [0081.316] GetThemeAppProperties () returned 0x3 [0081.316] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0081.316] IsAppThemed () returned 0x1 [0081.316] GetThemeAppProperties () returned 0x3 [0081.316] GetThemeAppProperties () returned 0x3 [0081.316] IsAppThemed () returned 0x1 [0081.316] GetThemeAppProperties () returned 0x3 [0081.316] GetThemeAppProperties () returned 0x3 [0081.316] IsThemePartDefined () returned 0x1 [0081.316] GdipCreateRegion (region=0x14df00) returned 0x0 [0081.316] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0081.316] GdipCreateMatrix (matrix=0x14df00) returned 0x0 [0081.317] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0081.317] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14df68) returned 0x0 [0081.317] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0081.317] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0081.317] LocalFree (hMem=0xa931f0) returned 0x0 [0081.317] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0081.317] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0081.317] LocalFree (hMem=0xa931f0) returned 0x0 [0081.317] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0081.317] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14dfd0) returned 0x0 [0081.317] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df90) returned 0x0 [0081.317] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df90) returned 0x0 [0081.317] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0081.317] GdipGetDC (graphics=0x1afd81d0, hdc=0x14dfd8) returned 0x0 [0081.317] GetCurrentObject (hdc=0x73010880, type=0x1) returned 0x1b00017 [0081.317] GetCurrentObject (hdc=0x73010880, type=0x2) returned 0x1900010 [0081.318] GetCurrentObject (hdc=0x73010880, type=0x7) returned 0x29050250 [0081.318] GetCurrentObject (hdc=0x73010880, type=0x6) returned 0x18a002e [0081.318] SaveDC (hdc=0x73010880) returned 1 [0081.318] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffad040872 [0081.318] GetClipRgn (hdc=0x73010880, hrgn=0xffffffffad040872) returned 0 [0081.318] SelectClipRgn (hdc=0x73010880, hrgn=0xffffffff8904086f) returned 2 [0081.318] DeleteObject (ho=0xffffffffad040872) returned 1 [0081.318] DeleteObject (ho=0xffffffff8904086f) returned 1 [0081.318] OffsetViewportOrgEx (in: hdc=0x73010880, x=0, y=0, lppt=0x21edf20 | out: lppt=0x21edf20) returned 1 [0081.318] DrawThemeParentBackground () returned 0x0 [0081.318] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14db88 | out: lpwndpl=0x14db88) returned 1 [0081.318] GetClientRect (in: hWnd=0x401fa, lpRect=0x14daa0 | out: lpRect=0x14daa0) returned 1 [0081.318] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0081.318] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0081.318] GetSystemMetrics (nIndex=42) returned 0 [0081.318] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d800, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0081.318] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d800) returned 0xc [0081.318] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d888 | out: lpRect=0x14d888) returned 1 [0081.318] GetCurrentObject (hdc=0x73010880, type=0x1) returned 0x1b00017 [0081.319] GetCurrentObject (hdc=0x73010880, type=0x2) returned 0x1900010 [0081.319] GetCurrentObject (hdc=0x73010880, type=0x7) returned 0x29050250 [0081.319] GetCurrentObject (hdc=0x73010880, type=0x6) returned 0x18a002e [0081.319] SaveDC (hdc=0x73010880) returned 2 [0081.319] GetNearestColor (hdc=0x73010880, color=0xa0) returned 0xa0 [0081.319] CreateSolidBrush (color=0xa0) returned 0xffffffff8f100860 [0081.319] FillRect (hDC=0x73010880, lprc=0x14d578, hbr=0xffffffff8f100860) returned 1 [0081.319] DeleteObject (ho=0xffffffff8f100860) returned 1 [0081.319] RestoreDC (hdc=0x73010880, nSavedDC=-1) returned 1 [0081.319] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0081.319] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0081.319] GetSystemMetrics (nIndex=42) returned 0 [0081.319] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0081.319] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0081.319] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d7b8 | out: lpRect=0x14d7b8) returned 1 [0081.319] GetCurrentObject (hdc=0x73010880, type=0x1) returned 0x1b00017 [0081.319] GetCurrentObject (hdc=0x73010880, type=0x2) returned 0x1900010 [0081.319] GetCurrentObject (hdc=0x73010880, type=0x7) returned 0x29050250 [0081.319] GetCurrentObject (hdc=0x73010880, type=0x6) returned 0x18a002e [0081.319] SaveDC (hdc=0x73010880) returned 2 [0081.319] GetNearestColor (hdc=0x73010880, color=0xa0) returned 0xa0 [0081.320] CreateSolidBrush (color=0xa0) returned 0xffffffff90100860 [0081.320] FillRect (hDC=0x73010880, lprc=0x14d4a8, hbr=0xffffffff90100860) returned 1 [0081.320] DeleteObject (ho=0xffffffff90100860) returned 1 [0081.320] RestoreDC (hdc=0x73010880, nSavedDC=-1) returned 1 [0081.320] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0081.320] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0081.320] GetSystemMetrics (nIndex=42) returned 0 [0081.320] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0081.320] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0081.320] RestoreDC (hdc=0x73010880, nSavedDC=-1) returned 1 [0081.320] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x73010880) returned 0x0 [0081.320] IsAppThemed () returned 0x1 [0081.320] GetThemeAppProperties () returned 0x3 [0081.320] GetThemeAppProperties () returned 0x3 [0081.320] IsAppThemed () returned 0x1 [0081.321] GetThemeAppProperties () returned 0x3 [0081.321] GetThemeAppProperties () returned 0x3 [0081.321] IsThemePartDefined () returned 0x1 [0081.321] GdipCreateRegion (region=0x14dea0) returned 0x0 [0081.321] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0081.321] GdipCreateMatrix (matrix=0x14dea0) returned 0x0 [0081.321] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0081.321] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14df08) returned 0x0 [0081.321] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0081.321] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0081.321] LocalFree (hMem=0xa931f0) returned 0x0 [0081.321] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0081.321] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0081.321] LocalFree (hMem=0xa931f0) returned 0x0 [0081.321] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0081.321] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df70) returned 0x0 [0081.321] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df30) returned 0x0 [0081.321] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df30) returned 0x0 [0081.321] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0081.321] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df78) returned 0x0 [0081.321] GetCurrentObject (hdc=0x73010880, type=0x1) returned 0x1b00017 [0081.321] GetCurrentObject (hdc=0x73010880, type=0x2) returned 0x1900010 [0081.321] GetCurrentObject (hdc=0x73010880, type=0x7) returned 0x29050250 [0081.322] GetCurrentObject (hdc=0x73010880, type=0x6) returned 0x18a002e [0081.322] SaveDC (hdc=0x73010880) returned 1 [0081.322] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8a04086f [0081.322] GetClipRgn (hdc=0x73010880, hrgn=0xffffffff8a04086f) returned 0 [0081.322] SelectClipRgn (hdc=0x73010880, hrgn=0xffffffffaf040872) returned 2 [0081.322] DeleteObject (ho=0xffffffff8a04086f) returned 1 [0081.322] DeleteObject (ho=0xffffffffaf040872) returned 1 [0081.322] OffsetViewportOrgEx (in: hdc=0x73010880, x=0, y=0, lppt=0x21eed28 | out: lppt=0x21eed28) returned 1 [0081.322] IsAppThemed () returned 0x1 [0081.322] GetThemeAppProperties () returned 0x3 [0081.322] GetThemeAppProperties () returned 0x3 [0081.322] DrawThemeBackground () returned 0x0 [0081.322] RestoreDC (hdc=0x73010880, nSavedDC=-1) returned 1 [0081.322] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x73010880) returned 0x0 [0081.322] GdipCreateRegion (region=0x14de90) returned 0x0 [0081.322] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0081.322] GdipCreateMatrix (matrix=0x14de90) returned 0x0 [0081.322] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0081.322] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14def8) returned 0x0 [0081.322] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0081.322] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0081.322] LocalFree (hMem=0xa931f0) returned 0x0 [0081.322] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0081.322] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0081.322] LocalFree (hMem=0xa931f0) returned 0x0 [0081.323] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0081.323] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df60) returned 0x0 [0081.323] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df20) returned 0x0 [0081.323] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df20) returned 0x0 [0081.323] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0081.323] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df68) returned 0x0 [0081.323] GetCurrentObject (hdc=0x73010880, type=0x1) returned 0x1b00017 [0081.323] GetCurrentObject (hdc=0x73010880, type=0x2) returned 0x1900010 [0081.323] GetCurrentObject (hdc=0x73010880, type=0x7) returned 0x29050250 [0081.323] GetCurrentObject (hdc=0x73010880, type=0x6) returned 0x18a002e [0081.323] SaveDC (hdc=0x73010880) returned 1 [0081.323] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffb0040872 [0081.323] GetClipRgn (hdc=0x73010880, hrgn=0xffffffffb0040872) returned 0 [0081.323] SelectClipRgn (hdc=0x73010880, hrgn=0xffffffff8b04086f) returned 2 [0081.323] DeleteObject (ho=0xffffffffb0040872) returned 1 [0081.323] DeleteObject (ho=0xffffffff8b04086f) returned 1 [0081.323] OffsetViewportOrgEx (in: hdc=0x73010880, x=0, y=0, lppt=0x21ef200 | out: lppt=0x21ef200) returned 1 [0081.324] IsAppThemed () returned 0x1 [0081.324] GetThemeAppProperties () returned 0x3 [0081.324] GetThemeAppProperties () returned 0x3 [0081.324] GetThemeBackgroundContentRect () returned 0x0 [0081.324] RestoreDC (hdc=0x73010880, nSavedDC=-1) returned 1 [0081.324] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x73010880) returned 0x0 [0081.324] IsAppThemed () returned 0x1 [0081.324] GetThemeAppProperties () returned 0x3 [0081.324] GetThemeAppProperties () returned 0x3 [0081.324] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e148) returned 0x0 [0081.324] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e128) returned 0x0 [0081.324] GetCurrentObject (hdc=0x73010880, type=0x1) returned 0x1b00017 [0081.324] GetCurrentObject (hdc=0x73010880, type=0x2) returned 0x1900010 [0081.324] GetCurrentObject (hdc=0x73010880, type=0x7) returned 0x29050250 [0081.324] GetCurrentObject (hdc=0x73010880, type=0x6) returned 0x18a002e [0081.324] SaveDC (hdc=0x73010880) returned 1 [0081.324] GetTextAlign (hdc=0x73010880) returned 0x0 [0081.324] GetTextColor (hdc=0x73010880) returned 0x0 [0081.324] GetCurrentObject (hdc=0x73010880, type=0x6) returned 0x18a002e [0081.325] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dc60 | out: pv=0x14dc60) returned 92 [0081.325] SelectObject (hdc=0x73010880, h=0x120a086d) returned 0x18a002e [0081.325] GetBkMode (hdc=0x73010880) returned 2 [0081.325] SetBkMode (hdc=0x73010880, mode=1) returned 2 [0081.325] DrawTextExW (in: hdc=0x73010880, lpchText="Check", cchText=5, lprc=0x14dea0, format=0x2415, lpdtp=0x21ef7e0 | out: lpchText="Check", lprc=0x14dea0) returned 13 [0081.325] DrawTextExW (in: hdc=0x73010880, lpchText="Check", cchText=5, lprc=0x14e0b8, format=0x2015, lpdtp=0x21ef7e0 | out: lpchText="Check", lprc=0x14e0b8) returned 13 [0081.325] RestoreDC (hdc=0x73010880, nSavedDC=-1) returned 1 [0081.325] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x73010880) returned 0x0 [0081.325] GetFocus () returned 0x1020c [0081.325] IsAppThemed () returned 0x1 [0081.326] GetThemeAppProperties () returned 0x3 [0081.326] GetThemeAppProperties () returned 0x3 [0081.326] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e438) returned 0x0 [0081.326] BitBlt (hdc=0x5010825, x=0, y=0, cx=408, cy=23, hdcSrc=0x73010880, x1=0, y1=0, rop=0xcc0020) returned 1 [0081.326] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x73010880) returned 0x0 [0081.326] SelectPalette (hdc=0x5010825, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0081.326] SelectObject (hdc=0x73010880, h=0x185000f) returned 0x29050250 [0081.326] DeleteDC (hdc=0x73010880) returned 1 [0081.326] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0081.326] EndPaint (hWnd=0x1020c, lpPaint=0x14e418) returned 1 [0081.326] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0081.326] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0081.326] WaitMessage () returned 1 [0081.369] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.369] IsWindowUnicode (hWnd=0x201c8) returned 1 [0081.369] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.369] TranslateMessage (lpMsg=0x14edb0) returned 0 [0081.369] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0081.369] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0081.370] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0081.370] WaitMessage () returned 1 [0081.384] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.384] IsWindowUnicode (hWnd=0x301ee) returned 1 [0081.384] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.384] TranslateMessage (lpMsg=0x14edb0) returned 0 [0081.384] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0081.385] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0081.385] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0081.385] CoTaskMemFree (pv=0xa692f0) [0081.386] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0081.386] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0081.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0081.386] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0081.386] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0081.386] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e500) returned 1 [0081.386] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x274 [0081.386] GetFileType (hFile=0x274) returned 0x1 [0081.386] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e470) returned 1 [0081.386] GetFileType (hFile=0x274) returned 0x1 [0081.386] ReadFile (in: hFile=0x274, lpBuffer=0x21f14b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x21f14b0*, lpNumberOfBytesRead=0x14e5d8*=0x2, lpOverlapped=0x0) returned 1 [0081.386] ReadFile (in: hFile=0x274, lpBuffer=0x21f14b0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x21f14b0*, lpNumberOfBytesRead=0x14e5d8*=0x0, lpOverlapped=0x0) returned 1 [0081.386] CloseHandle (hObject=0x274) returned 1 [0081.388] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0081.388] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0081.388] CoTaskMemFree (pv=0xa692f0) [0081.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0081.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0081.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0081.388] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0081.388] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0081.388] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0081.388] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e4c0) returned 1 [0081.388] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x274 [0081.389] GetFileType (hFile=0x274) returned 0x1 [0081.389] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e430) returned 1 [0081.389] GetFileType (hFile=0x274) returned 0x1 [0081.390] WriteFile (in: hFile=0x274, lpBuffer=0x21f4800*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x14e508, lpOverlapped=0x0 | out: lpBuffer=0x21f4800*, lpNumberOfBytesWritten=0x14e508*=0x2, lpOverlapped=0x0) returned 1 [0081.391] CloseHandle (hObject=0x274) returned 1 [0081.391] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0081.391] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0081.392] GetSystemMetrics (nIndex=42) returned 0 [0081.392] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e600, nMaxCount=5 | out: lpString="4:48") returned 4 [0081.392] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e600) returned 0x4 [0081.392] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0081.392] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0081.392] GetSystemMetrics (nIndex=42) returned 0 [0081.392] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e5a0, nMaxCount=5 | out: lpString="4:48") returned 4 [0081.392] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e5a0) returned 0x4 [0081.392] SetWindowTextW (hWnd=0x201da, lpString="4:47") returned 1 [0081.392] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xc, wParam=0x0, lParam=0x21f2524) returned 0x1 [0081.392] GetStockObject (i=5) returned 0x1900015 [0081.392] GetDlgItem (hDlg=0x401fa, nIDDlgItem=131546) returned 0x201da [0081.392] SendMessageW (hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0081.392] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0081.392] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0081.392] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0081.392] GetSystemMetrics (nIndex=42) returned 0 [0081.392] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e460, nMaxCount=5 | out: lpString="4:47") returned 4 [0081.393] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e460) returned 0x4 [0081.393] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0081.393] AdjustWindowRectEx (in: lpRect=0x14e478, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e478) returned 1 [0081.393] SelectObject (hdc=0x8010893, h=0x200a0899) returned 0x120a086d [0081.393] DrawTextExW (in: hdc=0x8010893, lpchText="4:47", cchText=4, lprc=0x14e3e8, format=0x2400, lpdtp=0x21f5ab8 | out: lpchText="4:47", lprc=0x14e3e8) returned 20 [0081.393] InvalidateRect (hWnd=0x201da, lpRect=0x0, bErase=1) returned 1 [0081.393] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0081.393] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0081.393] GetSystemMetrics (nIndex=42) returned 0 [0081.393] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14e3d0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0081.393] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14e3d0) returned 0xc [0081.393] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.393] IsWindowUnicode (hWnd=0x201da) returned 1 [0081.393] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.393] TranslateMessage (lpMsg=0x14edb0) returned 0 [0081.393] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0081.394] BeginPaint (in: hWnd=0x201da, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0x5010830 [0081.394] SelectPalette (hdc=0x5010830, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0081.394] CreateCompatibleDC (hdc=0x5010830) returned 0x75010880 [0081.394] SelectObject (hdc=0x75010880, h=0x29050250) returned 0x185000f [0081.394] GdipCreateFromHDC (hdc=0x75010880, graphics=0x14e428) returned 0x0 [0081.394] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0081.394] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=40, height=20, combineMode=0x0) returned 0x0 [0081.394] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0081.394] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0081.394] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14e4b8) returned 0x0 [0081.394] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0081.394] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0081.394] LocalFree (hMem=0xa931f0) returned 0x0 [0081.394] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0081.394] GdipCreateRegion (region=0x14e450) returned 0x0 [0081.394] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0081.394] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0081.395] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0081.395] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0081.395] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0081.395] GetSystemMetrics (nIndex=42) returned 0 [0081.395] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:47") returned 4 [0081.395] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0081.395] GetClientRect (in: hWnd=0x201da, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0081.395] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0081.395] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0081.395] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0081.395] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0081.395] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0081.395] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0081.395] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0081.395] LocalFree (hMem=0xa931f0) returned 0x0 [0081.395] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0081.395] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0081.395] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0081.395] LocalFree (hMem=0xa931f0) returned 0x0 [0081.395] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0081.395] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0081.395] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0081.395] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0081.396] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0081.396] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0081.396] GetCurrentObject (hdc=0x75010880, type=0x1) returned 0x1b00017 [0081.396] GetCurrentObject (hdc=0x75010880, type=0x2) returned 0x1900010 [0081.396] GetCurrentObject (hdc=0x75010880, type=0x7) returned 0x29050250 [0081.396] GetCurrentObject (hdc=0x75010880, type=0x6) returned 0x18a002e [0081.396] SaveDC (hdc=0x75010880) returned 1 [0081.396] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff8c04086f [0081.396] GetClipRgn (hdc=0x75010880, hrgn=0xffffffff8c04086f) returned 0 [0081.396] SelectClipRgn (hdc=0x75010880, hrgn=0xffffffffb4040872) returned 2 [0081.396] DeleteObject (ho=0xffffffff8c04086f) returned 1 [0081.396] DeleteObject (ho=0xffffffffb4040872) returned 1 [0081.396] OffsetViewportOrgEx (in: hdc=0x75010880, x=0, y=0, lppt=0x21f61b8 | out: lppt=0x21f61b8) returned 1 [0081.396] GetNearestColor (hdc=0x75010880, color=0xa0) returned 0xa0 [0081.396] CreateSolidBrush (color=0xa0) returned 0xffffffff91100860 [0081.396] FillRect (hDC=0x75010880, lprc=0x14e1e8, hbr=0xffffffff91100860) returned 1 [0081.396] DeleteObject (ho=0xffffffff91100860) returned 1 [0081.396] RestoreDC (hdc=0x75010880, nSavedDC=-1) returned 1 [0081.396] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x75010880) returned 0x0 [0081.396] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd500dbd) returned 0x0 [0081.397] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0081.397] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0081.397] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0081.397] GetSystemMetrics (nIndex=42) returned 0 [0081.397] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:47") returned 4 [0081.397] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0081.397] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0081.397] GetCurrentObject (hdc=0x75010880, type=0x1) returned 0x1b00017 [0081.397] GetCurrentObject (hdc=0x75010880, type=0x2) returned 0x1900010 [0081.397] GetCurrentObject (hdc=0x75010880, type=0x7) returned 0x29050250 [0081.397] GetCurrentObject (hdc=0x75010880, type=0x6) returned 0x18a002e [0081.397] SaveDC (hdc=0x75010880) returned 1 [0081.397] GetNearestColor (hdc=0x75010880, color=0xffffff) returned 0xffffff [0081.397] RestoreDC (hdc=0x75010880, nSavedDC=-1) returned 1 [0081.397] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x75010880) returned 0x0 [0081.397] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0081.398] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0081.398] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0081.398] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0081.398] GetCurrentObject (hdc=0x75010880, type=0x1) returned 0x1b00017 [0081.398] GetCurrentObject (hdc=0x75010880, type=0x2) returned 0x1900010 [0081.398] GetCurrentObject (hdc=0x75010880, type=0x7) returned 0x29050250 [0081.398] GetCurrentObject (hdc=0x75010880, type=0x6) returned 0x18a002e [0081.398] SaveDC (hdc=0x75010880) returned 1 [0081.398] GetTextAlign (hdc=0x75010880) returned 0x0 [0081.398] GetTextColor (hdc=0x75010880) returned 0x0 [0081.398] SetTextColor (hdc=0x75010880, color=0xffffff) returned 0x0 [0081.398] GetCurrentObject (hdc=0x75010880, type=0x6) returned 0x18a002e [0081.398] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0081.398] SelectObject (hdc=0x75010880, h=0x200a0899) returned 0x18a002e [0081.398] GetBkMode (hdc=0x75010880) returned 2 [0081.398] SetBkMode (hdc=0x75010880, mode=1) returned 2 [0081.398] DrawTextExW (in: hdc=0x75010880, lpchText="4:47", cchText=4, lprc=0x14e1c8, format=0x0, lpdtp=0x21f6a48 | out: lpchText="4:47", lprc=0x14e1c8) returned 20 [0081.399] RestoreDC (hdc=0x75010880, nSavedDC=-1) returned 1 [0081.399] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x75010880) returned 0x0 [0081.399] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0081.399] BitBlt (hdc=0x5010830, x=0, y=0, cx=40, cy=20, hdcSrc=0x75010880, x1=0, y1=0, rop=0xcc0020) returned 1 [0081.399] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x75010880) returned 0x0 [0081.399] SelectPalette (hdc=0x5010830, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0081.399] SelectObject (hdc=0x75010880, h=0x185000f) returned 0x29050250 [0081.399] DeleteDC (hdc=0x75010880) returned 1 [0081.399] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0081.399] EndPaint (hWnd=0x201da, lpPaint=0x14e448) returned 1 [0081.399] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0081.399] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0081.399] WaitMessage () returned 1 [0081.420] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.420] IsWindowUnicode (hWnd=0x401fa) returned 1 [0081.420] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.420] TranslateMessage (lpMsg=0x14edb0) returned 0 [0081.420] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0081.420] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.420] IsWindowUnicode (hWnd=0x401fa) returned 1 [0081.420] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.420] TranslateMessage (lpMsg=0x14edb0) returned 0 [0081.420] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0081.420] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x2a1, wParam=0x0, lParam=0x1320111) returned 0x0 [0081.420] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0081.420] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0081.420] WaitMessage () returned 1 [0081.462] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.462] IsWindowUnicode (hWnd=0x201e6) returned 1 [0081.462] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.462] TranslateMessage (lpMsg=0x14edb0) returned 0 [0081.462] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0081.462] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0081.462] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0081.462] WaitMessage () returned 1 [0081.478] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.478] IsWindowUnicode (hWnd=0x201c8) returned 1 [0081.478] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.478] TranslateMessage (lpMsg=0x14edb0) returned 0 [0081.478] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0081.478] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0081.478] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0081.478] WaitMessage () returned 1 [0081.587] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.587] IsWindowUnicode (hWnd=0x201c8) returned 1 [0081.587] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.587] TranslateMessage (lpMsg=0x14edb0) returned 0 [0081.587] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0081.588] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0081.588] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0081.588] WaitMessage () returned 1 [0081.697] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.697] IsWindowUnicode (hWnd=0x201c8) returned 1 [0081.697] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.697] TranslateMessage (lpMsg=0x14edb0) returned 0 [0081.697] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0081.697] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0081.697] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0081.697] WaitMessage () returned 1 [0081.805] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.806] IsWindowUnicode (hWnd=0x201c8) returned 1 [0081.806] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.806] TranslateMessage (lpMsg=0x14edb0) returned 0 [0081.806] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0081.806] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0081.806] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0081.806] WaitMessage () returned 1 [0081.915] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.915] IsWindowUnicode (hWnd=0x201c8) returned 1 [0081.915] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0081.915] TranslateMessage (lpMsg=0x14edb0) returned 0 [0081.915] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0081.915] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0081.915] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0081.915] WaitMessage () returned 1 [0082.024] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0082.024] IsWindowUnicode (hWnd=0x201c8) returned 1 [0082.024] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0082.024] TranslateMessage (lpMsg=0x14edb0) returned 0 [0082.024] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0082.024] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0082.024] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0082.024] WaitMessage () returned 1 [0082.133] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0082.133] IsWindowUnicode (hWnd=0x201c8) returned 1 [0082.133] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0082.133] TranslateMessage (lpMsg=0x14edb0) returned 0 [0082.133] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0082.133] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0082.133] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0082.133] WaitMessage () returned 1 [0082.243] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0082.243] IsWindowUnicode (hWnd=0x201c8) returned 1 [0082.243] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0082.243] TranslateMessage (lpMsg=0x14edb0) returned 0 [0082.243] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0082.243] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0082.243] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0082.243] WaitMessage () returned 1 [0082.352] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0082.352] IsWindowUnicode (hWnd=0x201c8) returned 1 [0082.352] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0082.352] TranslateMessage (lpMsg=0x14edb0) returned 0 [0082.352] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0082.352] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0082.352] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0082.352] WaitMessage () returned 1 [0082.398] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0082.398] IsWindowUnicode (hWnd=0x301ee) returned 1 [0082.398] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0082.398] TranslateMessage (lpMsg=0x14edb0) returned 0 [0082.398] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0082.399] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0082.399] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0082.399] CoTaskMemFree (pv=0xa692f0) [0082.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0082.399] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0082.399] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0082.400] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0082.400] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0082.400] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e500) returned 1 [0082.400] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x274 [0082.400] GetFileType (hFile=0x274) returned 0x1 [0082.400] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e470) returned 1 [0082.400] GetFileType (hFile=0x274) returned 0x1 [0082.400] ReadFile (in: hFile=0x274, lpBuffer=0x21f8848, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x21f8848*, lpNumberOfBytesRead=0x14e5d8*=0x2, lpOverlapped=0x0) returned 1 [0082.400] ReadFile (in: hFile=0x274, lpBuffer=0x21f8848, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x21f8848*, lpNumberOfBytesRead=0x14e5d8*=0x0, lpOverlapped=0x0) returned 1 [0082.400] CloseHandle (hObject=0x274) returned 1 [0082.401] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0082.401] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0082.401] CoTaskMemFree (pv=0xa692f0) [0082.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0082.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0082.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0082.402] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0082.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0082.402] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0082.402] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e4c0) returned 1 [0082.402] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x274 [0082.403] GetFileType (hFile=0x274) returned 0x1 [0082.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e430) returned 1 [0082.403] GetFileType (hFile=0x274) returned 0x1 [0082.403] WriteFile (in: hFile=0x274, lpBuffer=0x21fbb98*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x14e508, lpOverlapped=0x0 | out: lpBuffer=0x21fbb98*, lpNumberOfBytesWritten=0x14e508*=0x2, lpOverlapped=0x0) returned 1 [0082.404] CloseHandle (hObject=0x274) returned 1 [0082.405] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0082.405] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0082.405] GetSystemMetrics (nIndex=42) returned 0 [0082.405] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e600, nMaxCount=5 | out: lpString="4:47") returned 4 [0082.405] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e600) returned 0x4 [0082.405] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0082.405] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0082.405] GetSystemMetrics (nIndex=42) returned 0 [0082.405] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e5a0, nMaxCount=5 | out: lpString="4:47") returned 4 [0082.405] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e5a0) returned 0x4 [0082.405] SetWindowTextW (hWnd=0x201da, lpString="4:46") returned 1 [0082.405] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xc, wParam=0x0, lParam=0x21f98bc) returned 0x1 [0082.405] GetStockObject (i=5) returned 0x1900015 [0082.405] GetDlgItem (hDlg=0x401fa, nIDDlgItem=131546) returned 0x201da [0082.405] SendMessageW (hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0082.405] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0082.405] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0082.406] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0082.406] GetSystemMetrics (nIndex=42) returned 0 [0082.406] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e460, nMaxCount=5 | out: lpString="4:46") returned 4 [0082.406] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e460) returned 0x4 [0082.406] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0082.406] AdjustWindowRectEx (in: lpRect=0x14e478, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e478) returned 1 [0082.406] DrawTextExW (in: hdc=0x8010893, lpchText="4:46", cchText=4, lprc=0x14e3e8, format=0x2400, lpdtp=0x21fce50 | out: lpchText="4:46", lprc=0x14e3e8) returned 20 [0082.406] InvalidateRect (hWnd=0x201da, lpRect=0x0, bErase=1) returned 1 [0082.406] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0082.406] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0082.406] GetSystemMetrics (nIndex=42) returned 0 [0082.406] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14e3d0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0082.406] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14e3d0) returned 0xc [0082.406] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0082.406] IsWindowUnicode (hWnd=0x201da) returned 1 [0082.406] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0082.406] TranslateMessage (lpMsg=0x14edb0) returned 0 [0082.406] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0082.407] BeginPaint (in: hWnd=0x201da, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0x5010830 [0082.407] SelectPalette (hdc=0x5010830, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0082.407] CreateCompatibleDC (hdc=0x5010830) returned 0x76010880 [0082.407] SelectObject (hdc=0x76010880, h=0x29050250) returned 0x185000f [0082.407] GdipCreateFromHDC (hdc=0x76010880, graphics=0x14e428) returned 0x0 [0082.407] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0082.407] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=40, height=20, combineMode=0x0) returned 0x0 [0082.407] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0082.407] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0082.407] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14e4b8) returned 0x0 [0082.407] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0082.407] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0082.407] LocalFree (hMem=0xa931f0) returned 0x0 [0082.407] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0082.407] GdipCreateRegion (region=0x14e450) returned 0x0 [0082.407] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0082.407] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0082.407] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0082.407] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0082.407] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0082.407] GetSystemMetrics (nIndex=42) returned 0 [0082.407] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:46") returned 4 [0082.407] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0082.408] GetClientRect (in: hWnd=0x201da, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0082.408] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0082.408] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0082.408] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0082.408] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0082.408] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0082.408] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0082.408] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0082.408] LocalFree (hMem=0xa931f0) returned 0x0 [0082.408] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0082.408] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0082.408] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0082.408] LocalFree (hMem=0xa931f0) returned 0x0 [0082.408] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0082.408] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0082.408] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0082.408] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0082.408] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0082.409] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0082.409] GetCurrentObject (hdc=0x76010880, type=0x1) returned 0x1b00017 [0082.409] GetCurrentObject (hdc=0x76010880, type=0x2) returned 0x1900010 [0082.409] GetCurrentObject (hdc=0x76010880, type=0x7) returned 0x29050250 [0082.409] GetCurrentObject (hdc=0x76010880, type=0x6) returned 0x18a002e [0082.409] SaveDC (hdc=0x76010880) returned 1 [0082.409] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffb5040872 [0082.409] GetClipRgn (hdc=0x76010880, hrgn=0xffffffffb5040872) returned 0 [0082.409] SelectClipRgn (hdc=0x76010880, hrgn=0xffffffff8f04086f) returned 2 [0082.409] DeleteObject (ho=0xffffffffb5040872) returned 1 [0082.409] DeleteObject (ho=0xffffffff8f04086f) returned 1 [0082.409] OffsetViewportOrgEx (in: hdc=0x76010880, x=0, y=0, lppt=0x21fd550 | out: lppt=0x21fd550) returned 1 [0082.409] GetNearestColor (hdc=0x76010880, color=0xa0) returned 0xa0 [0082.409] CreateSolidBrush (color=0xa0) returned 0xffffffff92100860 [0082.409] FillRect (hDC=0x76010880, lprc=0x14e1e8, hbr=0xffffffff92100860) returned 1 [0082.410] DeleteObject (ho=0xffffffff92100860) returned 1 [0082.410] RestoreDC (hdc=0x76010880, nSavedDC=-1) returned 1 [0082.410] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x76010880) returned 0x0 [0082.410] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd4e0dbd) returned 0x0 [0082.410] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0082.410] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0082.410] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0082.410] GetSystemMetrics (nIndex=42) returned 0 [0082.410] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:46") returned 4 [0082.410] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0082.410] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0082.410] GetCurrentObject (hdc=0x76010880, type=0x1) returned 0x1b00017 [0082.410] GetCurrentObject (hdc=0x76010880, type=0x2) returned 0x1900010 [0082.410] GetCurrentObject (hdc=0x76010880, type=0x7) returned 0x29050250 [0082.411] GetCurrentObject (hdc=0x76010880, type=0x6) returned 0x18a002e [0082.411] SaveDC (hdc=0x76010880) returned 1 [0082.411] GetNearestColor (hdc=0x76010880, color=0xffffff) returned 0xffffff [0082.411] RestoreDC (hdc=0x76010880, nSavedDC=-1) returned 1 [0082.411] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x76010880) returned 0x0 [0082.411] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0082.411] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0082.411] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0082.411] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0082.411] GetCurrentObject (hdc=0x76010880, type=0x1) returned 0x1b00017 [0082.411] GetCurrentObject (hdc=0x76010880, type=0x2) returned 0x1900010 [0082.412] GetCurrentObject (hdc=0x76010880, type=0x7) returned 0x29050250 [0082.412] GetCurrentObject (hdc=0x76010880, type=0x6) returned 0x18a002e [0082.412] SaveDC (hdc=0x76010880) returned 1 [0082.412] GetTextAlign (hdc=0x76010880) returned 0x0 [0082.412] GetTextColor (hdc=0x76010880) returned 0x0 [0082.412] SetTextColor (hdc=0x76010880, color=0xffffff) returned 0x0 [0082.412] GetCurrentObject (hdc=0x76010880, type=0x6) returned 0x18a002e [0082.423] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0082.423] SelectObject (hdc=0x76010880, h=0x200a0899) returned 0x18a002e [0082.423] GetBkMode (hdc=0x76010880) returned 2 [0082.423] SetBkMode (hdc=0x76010880, mode=1) returned 2 [0082.423] DrawTextExW (in: hdc=0x76010880, lpchText="4:46", cchText=4, lprc=0x14e1c8, format=0x0, lpdtp=0x21fdde0 | out: lpchText="4:46", lprc=0x14e1c8) returned 20 [0082.423] RestoreDC (hdc=0x76010880, nSavedDC=-1) returned 1 [0082.423] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x76010880) returned 0x0 [0082.423] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0082.423] BitBlt (hdc=0x5010830, x=0, y=0, cx=40, cy=20, hdcSrc=0x76010880, x1=0, y1=0, rop=0xcc0020) returned 1 [0082.423] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x76010880) returned 0x0 [0082.423] SelectPalette (hdc=0x5010830, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0082.423] SelectObject (hdc=0x76010880, h=0x185000f) returned 0x29050250 [0082.424] DeleteDC (hdc=0x76010880) returned 1 [0082.424] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0082.424] EndPaint (hWnd=0x201da, lpPaint=0x14e448) returned 1 [0082.424] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0082.424] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0082.424] WaitMessage () returned 1 [0082.461] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0082.461] IsWindowUnicode (hWnd=0x201c8) returned 1 [0082.461] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0082.461] TranslateMessage (lpMsg=0x14edb0) returned 0 [0082.461] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0082.461] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0082.461] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0082.461] WaitMessage () returned 1 [0082.570] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0082.570] IsWindowUnicode (hWnd=0x201c8) returned 1 [0082.570] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0082.570] TranslateMessage (lpMsg=0x14edb0) returned 0 [0082.570] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0082.570] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0082.570] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0082.570] WaitMessage () returned 1 [0082.679] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0082.679] IsWindowUnicode (hWnd=0x201c8) returned 1 [0082.679] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0082.679] TranslateMessage (lpMsg=0x14edb0) returned 0 [0082.679] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0082.679] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0082.679] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0082.679] WaitMessage () returned 1 [0082.789] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0082.789] IsWindowUnicode (hWnd=0x201c8) returned 1 [0082.789] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0082.789] TranslateMessage (lpMsg=0x14edb0) returned 0 [0082.789] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0082.789] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0082.789] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0082.789] WaitMessage () returned 1 [0082.898] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0082.898] IsWindowUnicode (hWnd=0x201c8) returned 1 [0082.898] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0082.898] TranslateMessage (lpMsg=0x14edb0) returned 0 [0082.898] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0082.898] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0082.898] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0082.898] WaitMessage () returned 1 [0083.013] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.013] IsWindowUnicode (hWnd=0x201c8) returned 1 [0083.013] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.013] TranslateMessage (lpMsg=0x14edb0) returned 0 [0083.013] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0083.013] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.013] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.013] WaitMessage () returned 1 [0083.023] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.023] IsWindowUnicode (hWnd=0x1020c) returned 1 [0083.025] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.025] GetKeyState (nVirtKey=16) returned 0 [0083.025] GetKeyState (nVirtKey=17) returned 0 [0083.025] GetKeyState (nVirtKey=18) returned -127 [0083.025] SendMessageW (hWnd=0x1020c, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0083.025] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0083.025] GetKeyState (nVirtKey=16) returned 0 [0083.025] GetKeyState (nVirtKey=17) returned 0 [0083.025] GetKeyState (nVirtKey=18) returned -127 [0083.025] TranslateMessage (lpMsg=0x14edb0) returned 1 [0083.025] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0083.025] GetKeyState (nVirtKey=16) returned 0 [0083.025] GetKeyState (nVirtKey=17) returned 0 [0083.025] GetKeyState (nVirtKey=18) returned -127 [0083.025] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0 [0083.026] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.026] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.026] WaitMessage () returned 1 [0083.034] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.034] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0083.035] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.035] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0083.035] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0083.035] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0083.036] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0083.037] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x1c, wParam=0x0, lParam=0x444) returned 0x0 [0083.037] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x1c, wParam=0x0, lParam=0x444) returned 0x0 [0083.037] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x1c, wParam=0x0, lParam=0x444) returned 0x0 [0083.038] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401e4, Msg=0x1c, wParam=0x0, lParam=0x444) returned 0x0 [0083.043] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301a2, Msg=0x1c, wParam=0x0, lParam=0x444) returned 0x0 [0083.043] NtdllDefWindowProc_W (hWnd=0x40120, Msg=0x1c, wParam=0x0, lParam=0x444) returned 0x0 [0083.044] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x1c, wParam=0x0, lParam=0x444) returned 0x0 [0083.044] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0083.044] GetCapture () returned 0x0 [0083.044] InvalidateRect (hWnd=0x1020c, lpRect=0x0, bErase=0) returned 1 [0083.044] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0083.044] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0083.044] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0083.044] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.045] IsWindowUnicode (hWnd=0x1020c) returned 1 [0083.045] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.045] TranslateMessage (lpMsg=0x14edb0) returned 0 [0083.045] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0083.045] BeginPaint (in: hWnd=0x1020c, lpPaint=0x14e478 | out: lpPaint=0x14e478) returned 0x5010830 [0083.045] SelectPalette (hdc=0x5010830, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0083.045] CreateCompatibleDC (hdc=0x5010830) returned 0x7b010880 [0083.045] SelectObject (hdc=0x7b010880, h=0x29050250) returned 0x185000f [0083.045] GdipCreateFromHDC (hdc=0x7b010880, graphics=0x14e3f8) returned 0x0 [0083.046] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0083.046] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=408, height=23, combineMode=0x0) returned 0x0 [0083.046] GdipCreateMatrix (matrix=0x14e420) returned 0x0 [0083.046] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0083.046] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14e488) returned 0x0 [0083.046] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0083.046] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0083.046] LocalFree (hMem=0xa931f0) returned 0x0 [0083.046] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0083.046] GdipCreateRegion (region=0x14e420) returned 0x0 [0083.046] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0083.047] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e480) returned 0x0 [0083.047] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e520) returned 0x0 [0083.047] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd4c0dbd) returned 0x0 [0083.047] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0083.047] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e198) returned 0x0 [0083.047] GetCurrentObject (hdc=0x7b010880, type=0x1) returned 0x1b00017 [0083.047] GetCurrentObject (hdc=0x7b010880, type=0x2) returned 0x1900010 [0083.047] GetCurrentObject (hdc=0x7b010880, type=0x7) returned 0x29050250 [0083.047] GetCurrentObject (hdc=0x7b010880, type=0x6) returned 0x18a002e [0083.047] SaveDC (hdc=0x7b010880) returned 1 [0083.047] GetNearestColor (hdc=0x7b010880, color=0xa0) returned 0xa0 [0083.048] GetNearestColor (hdc=0x7b010880, color=0x35) returned 0x35 [0083.048] GetNearestColor (hdc=0x7b010880, color=0x0) returned 0x0 [0083.048] GetNearestColor (hdc=0x7b010880, color=0x4848e5) returned 0x4848e5 [0083.048] GetNearestColor (hdc=0x7b010880, color=0x0) returned 0x0 [0083.048] GetNearestColor (hdc=0x7b010880, color=0x5151ff) returned 0x5151ff [0083.048] GetNearestColor (hdc=0x7b010880, color=0x4848e5) returned 0x4848e5 [0083.048] GetNearestColor (hdc=0x7b010880, color=0xc0) returned 0xc0 [0083.048] GetNearestColor (hdc=0x7b010880, color=0x0) returned 0x0 [0083.048] RestoreDC (hdc=0x7b010880, nSavedDC=-1) returned 1 [0083.049] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x7b010880) returned 0x0 [0083.049] IsAppThemed () returned 0x1 [0083.049] GetThemeAppProperties () returned 0x3 [0083.049] GetThemeAppProperties () returned 0x3 [0083.049] IsAppThemed () returned 0x1 [0083.049] GetThemeAppProperties () returned 0x3 [0083.049] GetThemeAppProperties () returned 0x3 [0083.049] SelectObject (hdc=0x8010893, h=0x120a086d) returned 0x200a0899 [0083.049] DrawTextExW (in: hdc=0x8010893, lpchText="Check", cchText=5, lprc=0x14de08, format=0x2415, lpdtp=0x21fec58 | out: lpchText="Check", lprc=0x14de08) returned 13 [0083.049] IsAppThemed () returned 0x1 [0083.049] GetThemeAppProperties () returned 0x3 [0083.050] GetThemeAppProperties () returned 0x3 [0083.050] IsAppThemed () returned 0x1 [0083.050] GetThemeAppProperties () returned 0x3 [0083.050] GetThemeAppProperties () returned 0x3 [0083.050] GetFocus () returned 0x0 [0083.050] IsAppThemed () returned 0x1 [0083.050] GetThemeAppProperties () returned 0x3 [0083.050] GetThemeAppProperties () returned 0x3 [0083.050] IsAppThemed () returned 0x1 [0083.050] GetThemeAppProperties () returned 0x3 [0083.050] GetThemeAppProperties () returned 0x3 [0083.050] IsThemePartDefined () returned 0x1 [0083.050] IsAppThemed () returned 0x1 [0083.050] GetThemeAppProperties () returned 0x3 [0083.050] GetThemeAppProperties () returned 0x3 [0083.050] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0083.050] IsAppThemed () returned 0x1 [0083.050] GetThemeAppProperties () returned 0x3 [0083.050] GetThemeAppProperties () returned 0x3 [0083.050] IsAppThemed () returned 0x1 [0083.050] GetThemeAppProperties () returned 0x3 [0083.050] GetThemeAppProperties () returned 0x3 [0083.050] IsThemePartDefined () returned 0x1 [0083.050] GdipCreateRegion (region=0x14df00) returned 0x0 [0083.050] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0083.050] GdipCreateMatrix (matrix=0x14df00) returned 0x0 [0083.050] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0083.050] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14df68) returned 0x0 [0083.050] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0083.050] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0083.050] LocalFree (hMem=0xa931f0) returned 0x0 [0083.050] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0083.050] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0083.051] LocalFree (hMem=0xa931f0) returned 0x0 [0083.051] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0083.051] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14dfd0) returned 0x0 [0083.051] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df90) returned 0x0 [0083.051] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df90) returned 0x0 [0083.051] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0083.051] GdipGetDC (graphics=0x1afd81d0, hdc=0x14dfd8) returned 0x0 [0083.051] GetCurrentObject (hdc=0x7b010880, type=0x1) returned 0x1b00017 [0083.051] GetCurrentObject (hdc=0x7b010880, type=0x2) returned 0x1900010 [0083.051] GetCurrentObject (hdc=0x7b010880, type=0x7) returned 0x29050250 [0083.051] GetCurrentObject (hdc=0x7b010880, type=0x6) returned 0x18a002e [0083.051] SaveDC (hdc=0x7b010880) returned 1 [0083.051] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff9004086f [0083.051] GetClipRgn (hdc=0x7b010880, hrgn=0xffffffff9004086f) returned 0 [0083.051] SelectClipRgn (hdc=0x7b010880, hrgn=0xffffffffba040872) returned 2 [0083.051] DeleteObject (ho=0xffffffff9004086f) returned 1 [0083.051] DeleteObject (ho=0xffffffffba040872) returned 1 [0083.051] OffsetViewportOrgEx (in: hdc=0x7b010880, x=0, y=0, lppt=0x21ff640 | out: lppt=0x21ff640) returned 1 [0083.051] DrawThemeParentBackground () returned 0x0 [0083.051] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14db88 | out: lpwndpl=0x14db88) returned 1 [0083.051] GetClientRect (in: hWnd=0x401fa, lpRect=0x14daa0 | out: lpRect=0x14daa0) returned 1 [0083.051] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0083.051] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0083.051] GetSystemMetrics (nIndex=42) returned 0 [0083.051] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d800, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0083.052] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d800) returned 0xc [0083.052] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d888 | out: lpRect=0x14d888) returned 1 [0083.052] GetCurrentObject (hdc=0x7b010880, type=0x1) returned 0x1b00017 [0083.052] GetCurrentObject (hdc=0x7b010880, type=0x2) returned 0x1900010 [0083.052] GetCurrentObject (hdc=0x7b010880, type=0x7) returned 0x29050250 [0083.052] GetCurrentObject (hdc=0x7b010880, type=0x6) returned 0x18a002e [0083.052] SaveDC (hdc=0x7b010880) returned 2 [0083.052] GetNearestColor (hdc=0x7b010880, color=0xa0) returned 0xa0 [0083.052] CreateSolidBrush (color=0xa0) returned 0xffffffff93100860 [0083.052] FillRect (hDC=0x7b010880, lprc=0x14d578, hbr=0xffffffff93100860) returned 1 [0083.052] DeleteObject (ho=0xffffffff93100860) returned 1 [0083.052] RestoreDC (hdc=0x7b010880, nSavedDC=-1) returned 1 [0083.052] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0083.052] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0083.052] GetSystemMetrics (nIndex=42) returned 0 [0083.052] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0083.052] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0083.052] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d7b8 | out: lpRect=0x14d7b8) returned 1 [0083.052] GetCurrentObject (hdc=0x7b010880, type=0x1) returned 0x1b00017 [0083.052] GetCurrentObject (hdc=0x7b010880, type=0x2) returned 0x1900010 [0083.052] GetCurrentObject (hdc=0x7b010880, type=0x7) returned 0x29050250 [0083.052] GetCurrentObject (hdc=0x7b010880, type=0x6) returned 0x18a002e [0083.052] SaveDC (hdc=0x7b010880) returned 2 [0083.053] GetNearestColor (hdc=0x7b010880, color=0xa0) returned 0xa0 [0083.053] CreateSolidBrush (color=0xa0) returned 0xffffffff94100860 [0083.053] FillRect (hDC=0x7b010880, lprc=0x14d4a8, hbr=0xffffffff94100860) returned 1 [0083.053] DeleteObject (ho=0xffffffff94100860) returned 1 [0083.053] RestoreDC (hdc=0x7b010880, nSavedDC=-1) returned 1 [0083.053] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0083.053] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0083.054] GetSystemMetrics (nIndex=42) returned 0 [0083.054] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0083.054] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0083.054] RestoreDC (hdc=0x7b010880, nSavedDC=-1) returned 1 [0083.054] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x7b010880) returned 0x0 [0083.054] IsAppThemed () returned 0x1 [0083.054] GetThemeAppProperties () returned 0x3 [0083.055] GetThemeAppProperties () returned 0x3 [0083.055] IsAppThemed () returned 0x1 [0083.055] GetThemeAppProperties () returned 0x3 [0083.055] GetThemeAppProperties () returned 0x3 [0083.055] IsThemePartDefined () returned 0x1 [0083.055] GdipCreateRegion (region=0x14dea0) returned 0x0 [0083.055] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0083.055] GdipCreateMatrix (matrix=0x14dea0) returned 0x0 [0083.055] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0083.055] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14df08) returned 0x0 [0083.055] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0083.055] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0083.055] LocalFree (hMem=0xa931f0) returned 0x0 [0083.055] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0083.055] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0083.055] LocalFree (hMem=0xa931f0) returned 0x0 [0083.055] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0083.056] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df70) returned 0x0 [0083.056] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df30) returned 0x0 [0083.056] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df30) returned 0x0 [0083.056] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0083.056] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df78) returned 0x0 [0083.056] GetCurrentObject (hdc=0x7b010880, type=0x1) returned 0x1b00017 [0083.056] GetCurrentObject (hdc=0x7b010880, type=0x2) returned 0x1900010 [0083.056] GetCurrentObject (hdc=0x7b010880, type=0x7) returned 0x29050250 [0083.056] GetCurrentObject (hdc=0x7b010880, type=0x6) returned 0x18a002e [0083.056] SaveDC (hdc=0x7b010880) returned 1 [0083.056] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffbb040872 [0083.056] GetClipRgn (hdc=0x7b010880, hrgn=0xffffffffbb040872) returned 0 [0083.056] SelectClipRgn (hdc=0x7b010880, hrgn=0xffffffff9204086f) returned 2 [0083.057] DeleteObject (ho=0xffffffffbb040872) returned 1 [0083.057] DeleteObject (ho=0xffffffff9204086f) returned 1 [0083.057] OffsetViewportOrgEx (in: hdc=0x7b010880, x=0, y=0, lppt=0x2200448 | out: lppt=0x2200448) returned 1 [0083.057] IsAppThemed () returned 0x1 [0083.057] GetThemeAppProperties () returned 0x3 [0083.057] GetThemeAppProperties () returned 0x3 [0083.057] DrawThemeBackground () returned 0x0 [0083.057] RestoreDC (hdc=0x7b010880, nSavedDC=-1) returned 1 [0083.057] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x7b010880) returned 0x0 [0083.057] GdipCreateRegion (region=0x14de90) returned 0x0 [0083.057] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0083.057] GdipCreateMatrix (matrix=0x14de90) returned 0x0 [0083.057] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0083.057] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14def8) returned 0x0 [0083.057] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0083.058] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0083.058] LocalFree (hMem=0xa931f0) returned 0x0 [0083.058] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0083.058] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0083.058] LocalFree (hMem=0xa931f0) returned 0x0 [0083.058] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0083.058] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df60) returned 0x0 [0083.058] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df20) returned 0x0 [0083.058] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df20) returned 0x0 [0083.058] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0083.058] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df68) returned 0x0 [0083.058] GetCurrentObject (hdc=0x7b010880, type=0x1) returned 0x1b00017 [0083.058] GetCurrentObject (hdc=0x7b010880, type=0x2) returned 0x1900010 [0083.058] GetCurrentObject (hdc=0x7b010880, type=0x7) returned 0x29050250 [0083.058] GetCurrentObject (hdc=0x7b010880, type=0x6) returned 0x18a002e [0083.059] SaveDC (hdc=0x7b010880) returned 1 [0083.059] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff9304086f [0083.059] GetClipRgn (hdc=0x7b010880, hrgn=0xffffffff9304086f) returned 0 [0083.059] SelectClipRgn (hdc=0x7b010880, hrgn=0xffffffffbc040872) returned 2 [0083.059] DeleteObject (ho=0xffffffff9304086f) returned 1 [0083.059] DeleteObject (ho=0xffffffffbc040872) returned 1 [0083.059] OffsetViewportOrgEx (in: hdc=0x7b010880, x=0, y=0, lppt=0x2200920 | out: lppt=0x2200920) returned 1 [0083.059] IsAppThemed () returned 0x1 [0083.059] GetThemeAppProperties () returned 0x3 [0083.059] GetThemeAppProperties () returned 0x3 [0083.059] GetThemeBackgroundContentRect () returned 0x0 [0083.059] RestoreDC (hdc=0x7b010880, nSavedDC=-1) returned 1 [0083.059] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x7b010880) returned 0x0 [0083.059] IsAppThemed () returned 0x1 [0083.059] GetThemeAppProperties () returned 0x3 [0083.059] GetThemeAppProperties () returned 0x3 [0083.060] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e148) returned 0x0 [0083.060] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e128) returned 0x0 [0083.060] GetCurrentObject (hdc=0x7b010880, type=0x1) returned 0x1b00017 [0083.060] GetCurrentObject (hdc=0x7b010880, type=0x2) returned 0x1900010 [0083.060] GetCurrentObject (hdc=0x7b010880, type=0x7) returned 0x29050250 [0083.060] GetCurrentObject (hdc=0x7b010880, type=0x6) returned 0x18a002e [0083.060] SaveDC (hdc=0x7b010880) returned 1 [0083.060] GetTextAlign (hdc=0x7b010880) returned 0x0 [0083.060] GetTextColor (hdc=0x7b010880) returned 0x0 [0083.060] GetCurrentObject (hdc=0x7b010880, type=0x6) returned 0x18a002e [0083.060] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dc60 | out: pv=0x14dc60) returned 92 [0083.060] SelectObject (hdc=0x7b010880, h=0x120a086d) returned 0x18a002e [0083.060] GetBkMode (hdc=0x7b010880) returned 2 [0083.060] SetBkMode (hdc=0x7b010880, mode=1) returned 2 [0083.061] DrawTextExW (in: hdc=0x7b010880, lpchText="Check", cchText=5, lprc=0x14dea0, format=0x2415, lpdtp=0x2200f00 | out: lpchText="Check", lprc=0x14dea0) returned 13 [0083.061] DrawTextExW (in: hdc=0x7b010880, lpchText="Check", cchText=5, lprc=0x14e0b8, format=0x2015, lpdtp=0x2200f00 | out: lpchText="Check", lprc=0x14e0b8) returned 13 [0083.061] RestoreDC (hdc=0x7b010880, nSavedDC=-1) returned 1 [0083.061] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x7b010880) returned 0x0 [0083.061] GetFocus () returned 0x0 [0083.061] IsAppThemed () returned 0x1 [0083.061] GetThemeAppProperties () returned 0x3 [0083.061] GetThemeAppProperties () returned 0x3 [0083.061] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e438) returned 0x0 [0083.061] BitBlt (hdc=0x5010830, x=0, y=0, cx=408, cy=23, hdcSrc=0x7b010880, x1=0, y1=0, rop=0xcc0020) returned 1 [0083.061] GdipReleaseDC (graphics=0x1afd81d0, hdc=0x7b010880) returned 0x0 [0083.061] SelectPalette (hdc=0x5010830, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0083.061] SelectObject (hdc=0x7b010880, h=0x185000f) returned 0x29050250 [0083.062] DeleteDC (hdc=0x7b010880) returned 1 [0083.062] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0083.062] EndPaint (hWnd=0x1020c, lpPaint=0x14e418) returned 1 [0083.062] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.062] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.062] WaitMessage () returned 1 [0083.063] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.063] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x84, wParam=0x0, lParam=0x1ff02b8) returned 0x1 [0083.063] IsWindowUnicode (hWnd=0x401fa) returned 1 [0083.063] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.063] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x84, wParam=0x0, lParam=0x1ff02b8) returned 0x1 [0083.063] SetCursor (hCursor=0x10003) returned 0x10003 [0083.063] TranslateMessage (lpMsg=0x14edb0) returned 0 [0083.063] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0083.063] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x200, wParam=0x0, lParam=0x1320111) returned 0x0 [0083.063] GetKeyState (nVirtKey=1) returned 0 [0083.063] GetKeyState (nVirtKey=2) returned 0 [0083.063] GetKeyState (nVirtKey=4) returned 0 [0083.063] GetKeyState (nVirtKey=5) returned 0 [0083.063] GetKeyState (nVirtKey=6) returned 0 [0083.063] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.064] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.064] WaitMessage () returned 1 [0083.116] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.116] IsWindowUnicode (hWnd=0x201c8) returned 1 [0083.116] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.116] TranslateMessage (lpMsg=0x14edb0) returned 0 [0083.116] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0083.116] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.116] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.117] WaitMessage () returned 1 [0083.132] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.132] IsWindowUnicode (hWnd=0x201ec) returned 1 [0083.132] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.132] TranslateMessage (lpMsg=0x14edb0) returned 0 [0083.132] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0083.132] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.132] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.132] WaitMessage () returned 1 [0083.231] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.231] IsWindowUnicode (hWnd=0x201c8) returned 1 [0083.231] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.231] TranslateMessage (lpMsg=0x14edb0) returned 0 [0083.231] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0083.231] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.231] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.231] WaitMessage () returned 1 [0083.335] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.335] IsWindowUnicode (hWnd=0x201c8) returned 1 [0083.335] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.335] TranslateMessage (lpMsg=0x14edb0) returned 0 [0083.335] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0083.335] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.335] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.335] WaitMessage () returned 1 [0083.350] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.350] IsWindowUnicode (hWnd=0x201e6) returned 1 [0083.350] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.350] TranslateMessage (lpMsg=0x14edb0) returned 0 [0083.350] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0083.350] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.350] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.350] WaitMessage () returned 1 [0083.426] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.426] IsWindowUnicode (hWnd=0x301ee) returned 1 [0083.426] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.426] TranslateMessage (lpMsg=0x14edb0) returned 0 [0083.426] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0083.427] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0083.427] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0083.428] CoTaskMemFree (pv=0xa692f0) [0083.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0083.428] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0083.428] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0083.428] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0083.429] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0083.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e500) returned 1 [0083.429] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x274 [0083.429] GetFileType (hFile=0x274) returned 0x1 [0083.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e470) returned 1 [0083.429] GetFileType (hFile=0x274) returned 0x1 [0083.429] ReadFile (in: hFile=0x274, lpBuffer=0x2202d10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x2202d10*, lpNumberOfBytesRead=0x14e5d8*=0x2, lpOverlapped=0x0) returned 1 [0083.430] ReadFile (in: hFile=0x274, lpBuffer=0x2202d10, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x2202d10*, lpNumberOfBytesRead=0x14e5d8*=0x0, lpOverlapped=0x0) returned 1 [0083.430] CloseHandle (hObject=0x274) returned 1 [0083.431] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0083.431] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0083.432] CoTaskMemFree (pv=0xa692f0) [0083.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0083.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0083.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0083.432] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0083.432] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0083.432] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0083.432] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e4c0) returned 1 [0083.432] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x274 [0083.433] GetFileType (hFile=0x274) returned 0x1 [0083.433] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e430) returned 1 [0083.434] GetFileType (hFile=0x274) returned 0x1 [0083.434] WriteFile (in: hFile=0x274, lpBuffer=0x2206060*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x14e508, lpOverlapped=0x0 | out: lpBuffer=0x2206060*, lpNumberOfBytesWritten=0x14e508*=0x2, lpOverlapped=0x0) returned 1 [0083.435] CloseHandle (hObject=0x274) returned 1 [0083.436] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0083.436] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0083.436] GetSystemMetrics (nIndex=42) returned 0 [0083.436] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e600, nMaxCount=5 | out: lpString="4:46") returned 4 [0083.436] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e600) returned 0x4 [0083.437] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0083.437] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0083.437] GetSystemMetrics (nIndex=42) returned 0 [0083.438] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e5a0, nMaxCount=5 | out: lpString="4:46") returned 4 [0083.438] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e5a0) returned 0x4 [0083.438] SetWindowTextW (hWnd=0x201da, lpString="4:45") returned 1 [0083.438] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xc, wParam=0x0, lParam=0x2203d84) returned 0x1 [0083.439] GetStockObject (i=5) returned 0x1900015 [0083.440] GetDlgItem (hDlg=0x401fa, nIDDlgItem=131546) returned 0x201da [0083.440] SendMessageW (hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0083.440] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0083.441] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0083.441] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0083.442] GetSystemMetrics (nIndex=42) returned 0 [0083.442] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e460, nMaxCount=5 | out: lpString="4:45") returned 4 [0083.442] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e460) returned 0x4 [0083.443] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0083.445] AdjustWindowRectEx (in: lpRect=0x14e478, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e478) returned 1 [0083.445] SelectObject (hdc=0x8010893, h=0x200a0899) returned 0x120a086d [0083.445] DrawTextExW (in: hdc=0x8010893, lpchText="4:45", cchText=4, lprc=0x14e3e8, format=0x2400, lpdtp=0x2207318 | out: lpchText="4:45", lprc=0x14e3e8) returned 20 [0083.446] InvalidateRect (hWnd=0x201da, lpRect=0x0, bErase=1) returned 1 [0083.447] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0083.447] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0083.447] GetSystemMetrics (nIndex=42) returned 0 [0083.447] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14e3d0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0083.447] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14e3d0) returned 0xc [0083.448] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.448] IsWindowUnicode (hWnd=0x201da) returned 1 [0083.448] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.448] TranslateMessage (lpMsg=0x14edb0) returned 0 [0083.448] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0083.448] BeginPaint (in: hWnd=0x201da, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0x5010825 [0083.448] SelectPalette (hdc=0x5010825, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0083.448] CreateCompatibleDC (hdc=0x5010825) returned 0xffffffff83010880 [0083.448] SelectObject (hdc=0xffffffff83010880, h=0x29050250) returned 0x185000f [0083.448] GdipCreateFromHDC (hdc=0xffffffff83010880, graphics=0x14e428) returned 0x0 [0083.449] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0083.449] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=40, height=20, combineMode=0x0) returned 0x0 [0083.449] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0083.449] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0083.449] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14e4b8) returned 0x0 [0083.450] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0083.450] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0083.450] LocalFree (hMem=0xa931f0) returned 0x0 [0083.453] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0083.453] GdipCreateRegion (region=0x14e450) returned 0x0 [0083.453] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0083.454] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0083.454] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0083.454] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0083.454] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0083.454] GetSystemMetrics (nIndex=42) returned 0 [0083.454] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:45") returned 4 [0083.454] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0083.455] GetClientRect (in: hWnd=0x201da, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0083.455] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0083.455] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0083.455] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0083.455] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0083.456] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0083.456] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0083.456] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0083.456] LocalFree (hMem=0xa931f0) returned 0x0 [0083.457] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0083.457] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0083.457] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0083.457] LocalFree (hMem=0xa931f0) returned 0x0 [0083.458] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0083.458] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0083.458] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0083.459] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0083.459] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0083.459] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0083.459] GetCurrentObject (hdc=0xffffffff83010880, type=0x1) returned 0x1b00017 [0083.459] GetCurrentObject (hdc=0xffffffff83010880, type=0x2) returned 0x1900010 [0083.459] GetCurrentObject (hdc=0xffffffff83010880, type=0x7) returned 0x29050250 [0083.459] GetCurrentObject (hdc=0xffffffff83010880, type=0x6) returned 0x18a002e [0083.459] SaveDC (hdc=0xffffffff83010880) returned 1 [0083.459] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffbd040872 [0083.460] GetClipRgn (hdc=0xffffffff83010880, hrgn=0xffffffffbd040872) returned 0 [0083.460] SelectClipRgn (hdc=0xffffffff83010880, hrgn=0xffffffff9704086f) returned 2 [0083.460] DeleteObject (ho=0xffffffffbd040872) returned 1 [0083.460] DeleteObject (ho=0xffffffff9704086f) returned 1 [0083.460] OffsetViewportOrgEx (in: hdc=0xffffffff83010880, x=0, y=0, lppt=0x2207a18 | out: lppt=0x2207a18) returned 1 [0083.460] GetNearestColor (hdc=0xffffffff83010880, color=0xa0) returned 0xa0 [0083.460] CreateSolidBrush (color=0xa0) returned 0xffffffff95100860 [0083.460] FillRect (hDC=0xffffffff83010880, lprc=0x14e1e8, hbr=0xffffffff95100860) returned 1 [0083.460] DeleteObject (ho=0xffffffff95100860) returned 1 [0083.460] RestoreDC (hdc=0xffffffff83010880, nSavedDC=-1) returned 1 [0083.460] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff83010880) returned 0x0 [0083.460] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd4a0dbd) returned 0x0 [0083.461] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0083.461] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0083.461] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0083.461] GetSystemMetrics (nIndex=42) returned 0 [0083.461] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:45") returned 4 [0083.461] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0083.461] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0083.461] GetCurrentObject (hdc=0xffffffff83010880, type=0x1) returned 0x1b00017 [0083.461] GetCurrentObject (hdc=0xffffffff83010880, type=0x2) returned 0x1900010 [0083.461] GetCurrentObject (hdc=0xffffffff83010880, type=0x7) returned 0x29050250 [0083.461] GetCurrentObject (hdc=0xffffffff83010880, type=0x6) returned 0x18a002e [0083.461] SaveDC (hdc=0xffffffff83010880) returned 1 [0083.461] GetNearestColor (hdc=0xffffffff83010880, color=0xffffff) returned 0xffffff [0083.461] RestoreDC (hdc=0xffffffff83010880, nSavedDC=-1) returned 1 [0083.462] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff83010880) returned 0x0 [0083.462] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0083.462] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0083.462] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0083.462] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0083.462] GetCurrentObject (hdc=0xffffffff83010880, type=0x1) returned 0x1b00017 [0083.462] GetCurrentObject (hdc=0xffffffff83010880, type=0x2) returned 0x1900010 [0083.462] GetCurrentObject (hdc=0xffffffff83010880, type=0x7) returned 0x29050250 [0083.462] GetCurrentObject (hdc=0xffffffff83010880, type=0x6) returned 0x18a002e [0083.462] SaveDC (hdc=0xffffffff83010880) returned 1 [0083.463] GetTextAlign (hdc=0xffffffff83010880) returned 0x0 [0083.463] GetTextColor (hdc=0xffffffff83010880) returned 0x0 [0083.463] SetTextColor (hdc=0xffffffff83010880, color=0xffffff) returned 0x0 [0083.463] GetCurrentObject (hdc=0xffffffff83010880, type=0x6) returned 0x18a002e [0083.463] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0083.464] SelectObject (hdc=0xffffffff83010880, h=0x200a0899) returned 0x18a002e [0083.464] GetBkMode (hdc=0xffffffff83010880) returned 2 [0083.464] SetBkMode (hdc=0xffffffff83010880, mode=1) returned 2 [0083.464] DrawTextExW (in: hdc=0xffffffff83010880, lpchText="4:45", cchText=4, lprc=0x14e1c8, format=0x0, lpdtp=0x22082a8 | out: lpchText="4:45", lprc=0x14e1c8) returned 20 [0083.464] RestoreDC (hdc=0xffffffff83010880, nSavedDC=-1) returned 1 [0083.464] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff83010880) returned 0x0 [0083.465] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0083.465] BitBlt (hdc=0x5010825, x=0, y=0, cx=40, cy=20, hdcSrc=0xffffffff83010880, x1=0, y1=0, rop=0xcc0020) returned 1 [0083.465] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff83010880) returned 0x0 [0083.465] SelectPalette (hdc=0x5010825, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0083.465] SelectObject (hdc=0xffffffff83010880, h=0x185000f) returned 0x29050250 [0083.465] DeleteDC (hdc=0xffffffff83010880) returned 1 [0083.465] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0083.465] EndPaint (hWnd=0x201da, lpPaint=0x14e448) returned 1 [0083.465] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.466] IsWindowUnicode (hWnd=0x201c8) returned 1 [0083.466] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.466] TranslateMessage (lpMsg=0x14edb0) returned 0 [0083.466] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0083.466] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.466] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.466] WaitMessage () returned 1 [0083.471] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.471] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x27d0308) returned 0x1 [0083.472] IsWindowUnicode (hWnd=0x1020c) returned 1 [0083.472] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.472] TranslateMessage (lpMsg=0x14edb0) returned 0 [0083.472] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0083.472] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0083.472] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.473] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x27d0308) returned 0x1 [0083.473] IsWindowUnicode (hWnd=0x1020c) returned 1 [0083.473] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.474] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x27d0308) returned 0x1 [0083.474] SetCursor (hCursor=0x10003) returned 0x10003 [0083.475] TranslateMessage (lpMsg=0x14edb0) returned 0 [0083.475] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0083.476] _TrackMouseEvent (in: lpEventTrack=0x214a8d0 | out: lpEventTrack=0x214a8d0) returned 1 [0083.476] SendMessageW (hWnd=0x1020c, Msg=0xc12f, wParam=0x0, lParam=0x0) returned 0x0 [0083.476] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0xc12f, wParam=0x0, lParam=0x0) returned 0x0 [0083.476] InvalidateRect (hWnd=0x1020c, lpRect=0x0, bErase=0) returned 1 [0083.477] GetKeyState (nVirtKey=1) returned 0 [0083.477] GetKeyState (nVirtKey=2) returned 0 [0083.477] GetKeyState (nVirtKey=4) returned 0 [0083.477] GetKeyState (nVirtKey=5) returned 0 [0083.477] GetKeyState (nVirtKey=6) returned 0 [0083.478] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.478] IsWindowUnicode (hWnd=0x1020c) returned 1 [0083.478] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.478] TranslateMessage (lpMsg=0x14edb0) returned 0 [0083.478] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0083.479] BeginPaint (in: hWnd=0x1020c, lpPaint=0x14e478 | out: lpPaint=0x14e478) returned 0xb010256 [0083.479] SelectPalette (hdc=0xb010256, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0083.479] CreateCompatibleDC (hdc=0xb010256) returned 0xffffffff85010880 [0083.480] SelectObject (hdc=0xffffffff85010880, h=0x29050250) returned 0x185000f [0083.480] GdipCreateFromHDC (hdc=0xffffffff85010880, graphics=0x14e3f8) returned 0x0 [0083.481] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0083.481] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=408, height=23, combineMode=0x0) returned 0x0 [0083.482] GdipCreateMatrix (matrix=0x14e420) returned 0x0 [0083.482] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0083.482] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14e488) returned 0x0 [0083.483] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0083.483] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0083.483] LocalFree (hMem=0xa931f0) returned 0x0 [0083.484] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0083.484] GdipCreateRegion (region=0x14e420) returned 0x0 [0083.484] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0083.484] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e480) returned 0x0 [0083.485] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e520) returned 0x0 [0083.485] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd480dbd) returned 0x0 [0083.485] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0083.486] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e198) returned 0x0 [0083.486] GetCurrentObject (hdc=0xffffffff85010880, type=0x1) returned 0x1b00017 [0083.486] GetCurrentObject (hdc=0xffffffff85010880, type=0x2) returned 0x1900010 [0083.486] GetCurrentObject (hdc=0xffffffff85010880, type=0x7) returned 0x29050250 [0083.487] GetCurrentObject (hdc=0xffffffff85010880, type=0x6) returned 0x18a002e [0083.487] SaveDC (hdc=0xffffffff85010880) returned 1 [0083.488] GetNearestColor (hdc=0xffffffff85010880, color=0xa0) returned 0xa0 [0083.488] GetNearestColor (hdc=0xffffffff85010880, color=0x35) returned 0x35 [0083.488] GetNearestColor (hdc=0xffffffff85010880, color=0x0) returned 0x0 [0083.489] GetNearestColor (hdc=0xffffffff85010880, color=0x4848e5) returned 0x4848e5 [0083.489] GetNearestColor (hdc=0xffffffff85010880, color=0x0) returned 0x0 [0083.489] GetNearestColor (hdc=0xffffffff85010880, color=0x5151ff) returned 0x5151ff [0083.490] GetNearestColor (hdc=0xffffffff85010880, color=0x4848e5) returned 0x4848e5 [0083.490] GetNearestColor (hdc=0xffffffff85010880, color=0xc0) returned 0xc0 [0083.491] GetNearestColor (hdc=0xffffffff85010880, color=0x0) returned 0x0 [0083.491] RestoreDC (hdc=0xffffffff85010880, nSavedDC=-1) returned 1 [0083.492] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff85010880) returned 0x0 [0083.492] IsAppThemed () returned 0x1 [0083.492] GetThemeAppProperties () returned 0x3 [0083.492] GetThemeAppProperties () returned 0x3 [0083.493] IsAppThemed () returned 0x1 [0083.493] GetThemeAppProperties () returned 0x3 [0083.493] GetThemeAppProperties () returned 0x3 [0083.493] SelectObject (hdc=0x8010893, h=0x120a086d) returned 0x200a0899 [0083.494] DrawTextExW (in: hdc=0x8010893, lpchText="Check", cchText=5, lprc=0x14de08, format=0x2415, lpdtp=0x2208e58 | out: lpchText="Check", lprc=0x14de08) returned 13 [0083.495] IsAppThemed () returned 0x1 [0083.495] GetThemeAppProperties () returned 0x3 [0083.495] GetThemeAppProperties () returned 0x3 [0083.495] IsAppThemed () returned 0x1 [0083.496] GetThemeAppProperties () returned 0x3 [0083.496] GetThemeAppProperties () returned 0x3 [0083.496] IsAppThemed () returned 0x1 [0083.496] GetThemeAppProperties () returned 0x3 [0083.496] GetThemeAppProperties () returned 0x3 [0083.497] IsAppThemed () returned 0x1 [0083.497] GetThemeAppProperties () returned 0x3 [0083.497] GetThemeAppProperties () returned 0x3 [0083.497] IsThemePartDefined () returned 0x1 [0083.497] IsAppThemed () returned 0x1 [0083.497] GetThemeAppProperties () returned 0x3 [0083.498] GetThemeAppProperties () returned 0x3 [0083.498] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0083.498] IsAppThemed () returned 0x1 [0083.498] GetThemeAppProperties () returned 0x3 [0083.498] GetThemeAppProperties () returned 0x3 [0083.498] IsAppThemed () returned 0x1 [0083.498] GetThemeAppProperties () returned 0x3 [0083.498] GetThemeAppProperties () returned 0x3 [0083.498] IsThemePartDefined () returned 0x1 [0083.498] GdipCreateRegion (region=0x14df00) returned 0x0 [0083.499] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0083.499] GdipCreateMatrix (matrix=0x14df00) returned 0x0 [0083.499] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0083.500] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14df68) returned 0x0 [0083.500] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0083.500] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0083.501] LocalFree (hMem=0xa931f0) returned 0x0 [0083.501] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0083.501] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0083.501] LocalFree (hMem=0xa931f0) returned 0x0 [0083.502] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0083.502] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14dfd0) returned 0x0 [0083.502] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df90) returned 0x0 [0083.503] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df90) returned 0x0 [0083.503] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0083.503] GdipGetDC (graphics=0x1afd81d0, hdc=0x14dfd8) returned 0x0 [0083.504] GetCurrentObject (hdc=0xffffffff85010880, type=0x1) returned 0x1b00017 [0083.504] GetCurrentObject (hdc=0xffffffff85010880, type=0x2) returned 0x1900010 [0083.504] GetCurrentObject (hdc=0xffffffff85010880, type=0x7) returned 0x29050250 [0083.505] GetCurrentObject (hdc=0xffffffff85010880, type=0x6) returned 0x18a002e [0083.505] SaveDC (hdc=0xffffffff85010880) returned 1 [0083.506] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff9804086f [0083.507] GetClipRgn (hdc=0xffffffff85010880, hrgn=0xffffffff9804086f) returned 0 [0083.507] SelectClipRgn (hdc=0xffffffff85010880, hrgn=0xffffffffc0040872) returned 2 [0083.508] DeleteObject (ho=0xffffffff9804086f) returned 1 [0083.508] DeleteObject (ho=0xffffffffc0040872) returned 1 [0083.508] OffsetViewportOrgEx (in: hdc=0xffffffff85010880, x=0, y=0, lppt=0x2209840 | out: lppt=0x2209840) returned 1 [0083.509] DrawThemeParentBackground () returned 0x0 [0083.510] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14db88 | out: lpwndpl=0x14db88) returned 1 [0083.510] GetClientRect (in: hWnd=0x401fa, lpRect=0x14daa0 | out: lpRect=0x14daa0) returned 1 [0083.510] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0083.511] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0083.511] GetSystemMetrics (nIndex=42) returned 0 [0083.511] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d800, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0083.512] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d800) returned 0xc [0083.512] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d888 | out: lpRect=0x14d888) returned 1 [0083.513] GetCurrentObject (hdc=0xffffffff85010880, type=0x1) returned 0x1b00017 [0083.513] GetCurrentObject (hdc=0xffffffff85010880, type=0x2) returned 0x1900010 [0083.514] GetCurrentObject (hdc=0xffffffff85010880, type=0x7) returned 0x29050250 [0083.514] GetCurrentObject (hdc=0xffffffff85010880, type=0x6) returned 0x18a002e [0083.515] SaveDC (hdc=0xffffffff85010880) returned 2 [0083.515] GetNearestColor (hdc=0xffffffff85010880, color=0xa0) returned 0xa0 [0083.519] CreateSolidBrush (color=0xa0) returned 0xffffffff96100860 [0083.519] FillRect (hDC=0xffffffff85010880, lprc=0x14d578, hbr=0xffffffff96100860) returned 1 [0083.519] DeleteObject (ho=0xffffffff96100860) returned 1 [0083.519] RestoreDC (hdc=0xffffffff85010880, nSavedDC=-1) returned 1 [0083.519] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0083.519] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0083.519] GetSystemMetrics (nIndex=42) returned 0 [0083.519] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0083.519] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0083.520] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d7b8 | out: lpRect=0x14d7b8) returned 1 [0083.520] GetCurrentObject (hdc=0xffffffff85010880, type=0x1) returned 0x1b00017 [0083.520] GetCurrentObject (hdc=0xffffffff85010880, type=0x2) returned 0x1900010 [0083.520] GetCurrentObject (hdc=0xffffffff85010880, type=0x7) returned 0x29050250 [0083.520] GetCurrentObject (hdc=0xffffffff85010880, type=0x6) returned 0x18a002e [0083.520] SaveDC (hdc=0xffffffff85010880) returned 2 [0083.520] GetNearestColor (hdc=0xffffffff85010880, color=0xa0) returned 0xa0 [0083.520] CreateSolidBrush (color=0xa0) returned 0xffffffff97100860 [0083.520] FillRect (hDC=0xffffffff85010880, lprc=0x14d4a8, hbr=0xffffffff97100860) returned 1 [0083.520] DeleteObject (ho=0xffffffff97100860) returned 1 [0083.520] RestoreDC (hdc=0xffffffff85010880, nSavedDC=-1) returned 1 [0083.521] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0083.521] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0083.521] GetSystemMetrics (nIndex=42) returned 0 [0083.521] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0083.521] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0083.521] RestoreDC (hdc=0xffffffff85010880, nSavedDC=-1) returned 1 [0083.522] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff85010880) returned 0x0 [0083.522] IsAppThemed () returned 0x1 [0083.522] GetThemeAppProperties () returned 0x3 [0083.522] GetThemeAppProperties () returned 0x3 [0083.522] IsAppThemed () returned 0x1 [0083.522] GetThemeAppProperties () returned 0x3 [0083.522] GetThemeAppProperties () returned 0x3 [0083.522] IsThemePartDefined () returned 0x1 [0083.522] GdipCreateRegion (region=0x14dea0) returned 0x0 [0083.522] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0083.523] GdipCreateMatrix (matrix=0x14dea0) returned 0x0 [0083.523] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0083.523] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14df08) returned 0x0 [0083.523] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0083.523] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0083.523] LocalFree (hMem=0xa931f0) returned 0x0 [0083.523] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0083.523] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0083.523] LocalFree (hMem=0xa931f0) returned 0x0 [0083.523] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0083.523] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df70) returned 0x0 [0083.524] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df30) returned 0x0 [0083.524] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df30) returned 0x0 [0083.524] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0083.524] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df78) returned 0x0 [0083.524] GetCurrentObject (hdc=0xffffffff85010880, type=0x1) returned 0x1b00017 [0083.525] GetCurrentObject (hdc=0xffffffff85010880, type=0x2) returned 0x1900010 [0083.525] GetCurrentObject (hdc=0xffffffff85010880, type=0x7) returned 0x29050250 [0083.525] GetCurrentObject (hdc=0xffffffff85010880, type=0x6) returned 0x18a002e [0083.525] SaveDC (hdc=0xffffffff85010880) returned 1 [0083.525] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffc1040872 [0083.525] GetClipRgn (hdc=0xffffffff85010880, hrgn=0xffffffffc1040872) returned 0 [0083.525] SelectClipRgn (hdc=0xffffffff85010880, hrgn=0xffffffff9a04086f) returned 2 [0083.525] DeleteObject (ho=0xffffffffc1040872) returned 1 [0083.525] DeleteObject (ho=0xffffffff9a04086f) returned 1 [0083.525] OffsetViewportOrgEx (in: hdc=0xffffffff85010880, x=0, y=0, lppt=0x220a648 | out: lppt=0x220a648) returned 1 [0083.526] IsAppThemed () returned 0x1 [0083.526] GetThemeAppProperties () returned 0x3 [0083.526] GetThemeAppProperties () returned 0x3 [0083.526] DrawThemeBackground () returned 0x0 [0083.526] RestoreDC (hdc=0xffffffff85010880, nSavedDC=-1) returned 1 [0083.526] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff85010880) returned 0x0 [0083.526] GdipCreateRegion (region=0x14de90) returned 0x0 [0083.526] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0083.526] GdipCreateMatrix (matrix=0x14de90) returned 0x0 [0083.526] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0083.526] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14def8) returned 0x0 [0083.527] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0083.527] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0083.527] LocalFree (hMem=0xa931f0) returned 0x0 [0083.527] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0083.527] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0083.527] LocalFree (hMem=0xa931f0) returned 0x0 [0083.527] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0083.527] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df60) returned 0x0 [0083.527] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df20) returned 0x0 [0083.528] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df20) returned 0x0 [0083.528] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0083.528] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df68) returned 0x0 [0083.528] GetCurrentObject (hdc=0xffffffff85010880, type=0x1) returned 0x1b00017 [0083.528] GetCurrentObject (hdc=0xffffffff85010880, type=0x2) returned 0x1900010 [0083.528] GetCurrentObject (hdc=0xffffffff85010880, type=0x7) returned 0x29050250 [0083.528] GetCurrentObject (hdc=0xffffffff85010880, type=0x6) returned 0x18a002e [0083.528] SaveDC (hdc=0xffffffff85010880) returned 1 [0083.528] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffff9b04086f [0083.529] GetClipRgn (hdc=0xffffffff85010880, hrgn=0xffffffff9b04086f) returned 0 [0083.529] SelectClipRgn (hdc=0xffffffff85010880, hrgn=0xffffffffc2040872) returned 2 [0083.529] DeleteObject (ho=0xffffffff9b04086f) returned 1 [0083.529] DeleteObject (ho=0xffffffffc2040872) returned 1 [0083.529] OffsetViewportOrgEx (in: hdc=0xffffffff85010880, x=0, y=0, lppt=0x220ab20 | out: lppt=0x220ab20) returned 1 [0083.529] IsAppThemed () returned 0x1 [0083.529] GetThemeAppProperties () returned 0x3 [0083.529] GetThemeAppProperties () returned 0x3 [0083.529] GetThemeBackgroundContentRect () returned 0x0 [0083.529] RestoreDC (hdc=0xffffffff85010880, nSavedDC=-1) returned 1 [0083.529] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff85010880) returned 0x0 [0083.529] IsAppThemed () returned 0x1 [0083.529] GetThemeAppProperties () returned 0x3 [0083.529] GetThemeAppProperties () returned 0x3 [0083.530] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e148) returned 0x0 [0083.530] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e128) returned 0x0 [0083.530] GetCurrentObject (hdc=0xffffffff85010880, type=0x1) returned 0x1b00017 [0083.530] GetCurrentObject (hdc=0xffffffff85010880, type=0x2) returned 0x1900010 [0083.530] GetCurrentObject (hdc=0xffffffff85010880, type=0x7) returned 0x29050250 [0083.530] GetCurrentObject (hdc=0xffffffff85010880, type=0x6) returned 0x18a002e [0083.530] SaveDC (hdc=0xffffffff85010880) returned 1 [0083.530] GetTextAlign (hdc=0xffffffff85010880) returned 0x0 [0083.530] GetTextColor (hdc=0xffffffff85010880) returned 0x0 [0083.530] GetCurrentObject (hdc=0xffffffff85010880, type=0x6) returned 0x18a002e [0083.531] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dc60 | out: pv=0x14dc60) returned 92 [0083.531] SelectObject (hdc=0xffffffff85010880, h=0x120a086d) returned 0x18a002e [0083.531] GetBkMode (hdc=0xffffffff85010880) returned 2 [0083.531] SetBkMode (hdc=0xffffffff85010880, mode=1) returned 2 [0083.531] DrawTextExW (in: hdc=0xffffffff85010880, lpchText="Check", cchText=5, lprc=0x14dea0, format=0x2415, lpdtp=0x220b100 | out: lpchText="Check", lprc=0x14dea0) returned 13 [0083.531] DrawTextExW (in: hdc=0xffffffff85010880, lpchText="Check", cchText=5, lprc=0x14e0b8, format=0x2015, lpdtp=0x220b100 | out: lpchText="Check", lprc=0x14e0b8) returned 13 [0083.531] RestoreDC (hdc=0xffffffff85010880, nSavedDC=-1) returned 1 [0083.531] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff85010880) returned 0x0 [0083.532] GetFocus () returned 0x0 [0083.532] IsAppThemed () returned 0x1 [0083.532] GetThemeAppProperties () returned 0x3 [0083.532] GetThemeAppProperties () returned 0x3 [0083.532] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e438) returned 0x0 [0083.532] BitBlt (hdc=0xb010256, x=0, y=0, cx=408, cy=23, hdcSrc=0xffffffff85010880, x1=0, y1=0, rop=0xcc0020) returned 1 [0083.532] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff85010880) returned 0x0 [0083.532] SelectPalette (hdc=0xb010256, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0083.532] SelectObject (hdc=0xffffffff85010880, h=0x185000f) returned 0x29050250 [0083.532] DeleteDC (hdc=0xffffffff85010880) returned 1 [0083.532] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0083.532] EndPaint (hWnd=0x1020c, lpPaint=0x14e418) returned 1 [0083.532] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.532] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.533] WaitMessage () returned 1 [0083.553] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.553] IsWindowUnicode (hWnd=0x201c8) returned 1 [0083.553] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.553] TranslateMessage (lpMsg=0x14edb0) returned 0 [0083.553] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0083.553] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.553] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.553] WaitMessage () returned 1 [0083.585] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.585] IsWindowUnicode (hWnd=0x1020c) returned 1 [0083.585] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.585] TranslateMessage (lpMsg=0x14edb0) returned 0 [0083.585] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0083.586] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.586] IsWindowUnicode (hWnd=0x1020c) returned 1 [0083.586] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.586] TranslateMessage (lpMsg=0x14edb0) returned 0 [0083.586] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0083.586] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x2a1, wParam=0x0, lParam=0x600bd) returned 0x0 [0083.587] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.587] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.587] WaitMessage () returned 1 [0083.662] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.662] IsWindowUnicode (hWnd=0x201c8) returned 1 [0083.662] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.662] TranslateMessage (lpMsg=0x14edb0) returned 0 [0083.662] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0083.662] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.662] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.662] WaitMessage () returned 1 [0083.698] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.698] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x27d0308) returned 0x1 [0083.698] IsWindowUnicode (hWnd=0x1020c) returned 1 [0083.698] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.698] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x27d0308) returned 0x1 [0083.698] GetDlgItem (hDlg=0x401fa, nIDDlgItem=0) returned 0x0 [0083.701] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x210, wParam=0x201, lParam=0x1b00161) returned 0x0 [0083.701] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x21, wParam=0x401fa, lParam=0x2010001) returned 0x1 [0083.701] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x21, wParam=0x401fa, lParam=0x2010001) returned 0x1 [0083.701] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0083.701] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0083.701] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0083.701] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401e4, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0083.701] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301a2, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0083.701] NtdllDefWindowProc_W (hWnd=0x40120, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0083.701] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0083.701] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0083.702] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0083.702] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0083.702] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0083.703] GetFocus () returned 0x0 [0083.703] SetFocus (hWnd=0x1020c) returned 0x0 [0083.703] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0083.703] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0083.703] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0083.703] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0083.704] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0083.704] GetStockObject (i=5) returned 0x1900015 [0083.704] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0083.704] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0xd, wParam=0x6, lParam=0xa84460) returned 0x5 [0083.704] GetDlgItem (hDlg=0x401fa, nIDDlgItem=66060) returned 0x1020c [0083.704] SendMessageW (hWnd=0x1020c, Msg=0x202b, wParam=0x1020c, lParam=0x14dc40) returned 0x0 [0083.704] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x202b, wParam=0x1020c, lParam=0x14dc40) returned 0x0 [0083.704] InvalidateRect (hWnd=0x1020c, lpRect=0x0, bErase=0) returned 1 [0083.705] SetCursor (hCursor=0x10003) returned 0x10003 [0083.705] TranslateMessage (lpMsg=0x14edb0) returned 0 [0083.705] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0083.705] GetKeyState (nVirtKey=1) returned -127 [0083.705] GetKeyState (nVirtKey=2) returned 0 [0083.705] GetKeyState (nVirtKey=4) returned 0 [0083.705] GetKeyState (nVirtKey=5) returned 0 [0083.705] GetKeyState (nVirtKey=6) returned 0 [0083.705] IsWindowVisible (hWnd=0x1020c) returned 1 [0083.705] IsWindowEnabled (hWnd=0x1020c) returned 1 [0083.705] SetFocus (hWnd=0x1020c) returned 0x1020c [0083.705] GetFocus () returned 0x1020c [0083.705] GetFocus () returned 0x1020c [0083.705] GetFocus () returned 0x1020c [0083.705] GetKeyState (nVirtKey=1) returned -127 [0083.705] GetKeyState (nVirtKey=2) returned 0 [0083.706] GetKeyState (nVirtKey=4) returned 0 [0083.706] GetKeyState (nVirtKey=5) returned 0 [0083.706] GetKeyState (nVirtKey=6) returned 0 [0083.706] GetCapture () returned 0x0 [0083.706] SetCapture (hWnd=0x1020c) returned 0x0 [0083.706] GetKeyState (nVirtKey=1) returned -127 [0083.706] GetKeyState (nVirtKey=2) returned 0 [0083.706] GetKeyState (nVirtKey=4) returned 0 [0083.706] GetKeyState (nVirtKey=5) returned 0 [0083.706] GetKeyState (nVirtKey=6) returned 0 [0083.706] NotifyWinEvent (event=0x800a, hwnd=0x1020c, idObject=-4, idChild=0) [0083.706] InvalidateRect (hWnd=0x1020c, lpRect=0x14e6f0, bErase=0) returned 1 [0083.706] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.706] GetMessageA (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.706] TranslateMessage (lpMsg=0x14edb0) returned 0 [0083.706] DispatchMessageA (lpMsg=0x14edb0) returned 0x0 [0083.706] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.706] GetMessageA (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.707] TranslateMessage (lpMsg=0x14edb0) returned 0 [0083.707] DispatchMessageA (lpMsg=0x14edb0) returned 0x0 [0083.707] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.707] IsWindowUnicode (hWnd=0x1020c) returned 1 [0083.707] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.707] TranslateMessage (lpMsg=0x14edb0) returned 0 [0083.707] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0083.707] MapWindowPoints (in: hWndFrom=0x1020c, hWndTo=0x0, lpPoints=0x220b410, cPoints=0x1 | out: lpPoints=0x220b410) returned 41353803 [0083.707] NotifyWinEvent (event=0x800a, hwnd=0x1020c, idObject=-4, idChild=0) [0083.707] InvalidateRect (hWnd=0x1020c, lpRect=0x14e680, bErase=0) returned 1 [0083.707] UpdateWindow (hWnd=0x1020c) returned 1 [0083.707] BeginPaint (in: hWnd=0x1020c, lpPaint=0x14ddf8 | out: lpPaint=0x14ddf8) returned 0x5010825 [0083.707] SelectPalette (hdc=0x5010825, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0083.707] CreateCompatibleDC (hdc=0x5010825) returned 0xffffffff8c010880 [0083.708] SelectObject (hdc=0xffffffff8c010880, h=0x29050250) returned 0x185000f [0083.708] GdipCreateFromHDC (hdc=0xffffffff8c010880, graphics=0x14dd78) returned 0x0 [0083.708] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0083.708] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=408, height=23, combineMode=0x0) returned 0x0 [0083.708] GdipCreateMatrix (matrix=0x14dda0) returned 0x0 [0083.708] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0083.708] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14de08) returned 0x0 [0083.708] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0083.708] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0083.708] LocalFree (hMem=0xa931f0) returned 0x0 [0083.709] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0083.709] GdipCreateRegion (region=0x14dda0) returned 0x0 [0083.709] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0083.709] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14de00) returned 0x0 [0083.709] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14dea0) returned 0x0 [0083.709] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd460dbd) returned 0x0 [0083.709] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0083.709] GdipGetDC (graphics=0x1afd81d0, hdc=0x14db18) returned 0x0 [0083.709] GetCurrentObject (hdc=0xffffffff8c010880, type=0x1) returned 0x1b00017 [0083.709] GetCurrentObject (hdc=0xffffffff8c010880, type=0x2) returned 0x1900010 [0083.709] GetCurrentObject (hdc=0xffffffff8c010880, type=0x7) returned 0x29050250 [0083.710] GetCurrentObject (hdc=0xffffffff8c010880, type=0x6) returned 0x18a002e [0083.710] SaveDC (hdc=0xffffffff8c010880) returned 1 [0083.710] GetNearestColor (hdc=0xffffffff8c010880, color=0xa0) returned 0xa0 [0083.710] GetNearestColor (hdc=0xffffffff8c010880, color=0x35) returned 0x35 [0083.710] GetNearestColor (hdc=0xffffffff8c010880, color=0x0) returned 0x0 [0083.710] GetNearestColor (hdc=0xffffffff8c010880, color=0x4848e5) returned 0x4848e5 [0083.710] GetNearestColor (hdc=0xffffffff8c010880, color=0x0) returned 0x0 [0083.710] GetNearestColor (hdc=0xffffffff8c010880, color=0x5151ff) returned 0x5151ff [0083.710] GetNearestColor (hdc=0xffffffff8c010880, color=0x4848e5) returned 0x4848e5 [0083.710] GetNearestColor (hdc=0xffffffff8c010880, color=0xc0) returned 0xc0 [0083.711] GetNearestColor (hdc=0xffffffff8c010880, color=0x0) returned 0x0 [0083.711] RestoreDC (hdc=0xffffffff8c010880, nSavedDC=-1) returned 1 [0083.711] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8c010880) returned 0x0 [0083.711] IsAppThemed () returned 0x1 [0083.711] GetThemeAppProperties () returned 0x3 [0083.711] GetThemeAppProperties () returned 0x3 [0083.711] IsAppThemed () returned 0x1 [0083.711] GetThemeAppProperties () returned 0x3 [0083.711] GetThemeAppProperties () returned 0x3 [0083.711] DrawTextExW (in: hdc=0x8010893, lpchText="Check", cchText=5, lprc=0x14d788, format=0x2415, lpdtp=0x220bf38 | out: lpchText="Check", lprc=0x14d788) returned 13 [0083.711] IsAppThemed () returned 0x1 [0083.711] GetThemeAppProperties () returned 0x3 [0083.711] GetThemeAppProperties () returned 0x3 [0083.711] IsAppThemed () returned 0x1 [0083.711] GetThemeAppProperties () returned 0x3 [0083.712] GetThemeAppProperties () returned 0x3 [0083.712] IsAppThemed () returned 0x1 [0083.712] GetThemeAppProperties () returned 0x3 [0083.712] GetThemeAppProperties () returned 0x3 [0083.712] IsAppThemed () returned 0x1 [0083.712] GetThemeAppProperties () returned 0x3 [0083.712] GetThemeAppProperties () returned 0x3 [0083.712] IsThemePartDefined () returned 0x1 [0083.712] IsAppThemed () returned 0x1 [0083.712] GetThemeAppProperties () returned 0x3 [0083.712] GetThemeAppProperties () returned 0x3 [0083.712] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0083.712] IsAppThemed () returned 0x1 [0083.712] GetThemeAppProperties () returned 0x3 [0083.712] GetThemeAppProperties () returned 0x3 [0083.712] IsAppThemed () returned 0x1 [0083.712] GetThemeAppProperties () returned 0x3 [0083.712] GetThemeAppProperties () returned 0x3 [0083.712] IsThemePartDefined () returned 0x1 [0083.713] GdipCreateRegion (region=0x14d880) returned 0x0 [0083.713] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0083.713] GdipCreateMatrix (matrix=0x14d880) returned 0x0 [0083.713] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0083.713] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14d8e8) returned 0x0 [0083.713] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0083.713] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0083.713] LocalFree (hMem=0xa931f0) returned 0x0 [0083.713] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0083.713] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0083.713] LocalFree (hMem=0xa931f0) returned 0x0 [0083.713] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0083.713] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d950) returned 0x0 [0083.714] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d910) returned 0x0 [0083.714] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14d910) returned 0x0 [0083.714] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0083.714] GdipGetDC (graphics=0x1afd81d0, hdc=0x14d958) returned 0x0 [0083.714] GetCurrentObject (hdc=0xffffffff8c010880, type=0x1) returned 0x1b00017 [0083.714] GetCurrentObject (hdc=0xffffffff8c010880, type=0x2) returned 0x1900010 [0083.714] GetCurrentObject (hdc=0xffffffff8c010880, type=0x7) returned 0x29050250 [0083.714] GetCurrentObject (hdc=0xffffffff8c010880, type=0x6) returned 0x18a002e [0083.714] SaveDC (hdc=0xffffffff8c010880) returned 1 [0083.714] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffc3040872 [0083.714] GetClipRgn (hdc=0xffffffff8c010880, hrgn=0xffffffffc3040872) returned 0 [0083.715] SelectClipRgn (hdc=0xffffffff8c010880, hrgn=0xffffffffa104086f) returned 2 [0083.715] DeleteObject (ho=0xffffffffc3040872) returned 1 [0083.715] DeleteObject (ho=0xffffffffa104086f) returned 1 [0083.715] OffsetViewportOrgEx (in: hdc=0xffffffff8c010880, x=0, y=0, lppt=0x220c920 | out: lppt=0x220c920) returned 1 [0083.715] DrawThemeParentBackground () returned 0x0 [0083.715] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14d508 | out: lpwndpl=0x14d508) returned 1 [0083.715] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d420 | out: lpRect=0x14d420) returned 1 [0083.715] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0083.715] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0083.715] GetSystemMetrics (nIndex=42) returned 0 [0083.715] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d180, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0083.715] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d180) returned 0xc [0083.716] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d208 | out: lpRect=0x14d208) returned 1 [0083.716] GetCurrentObject (hdc=0xffffffff8c010880, type=0x1) returned 0x1b00017 [0083.716] GetCurrentObject (hdc=0xffffffff8c010880, type=0x2) returned 0x1900010 [0083.716] GetCurrentObject (hdc=0xffffffff8c010880, type=0x7) returned 0x29050250 [0083.716] GetCurrentObject (hdc=0xffffffff8c010880, type=0x6) returned 0x18a002e [0083.716] SaveDC (hdc=0xffffffff8c010880) returned 2 [0083.716] GetNearestColor (hdc=0xffffffff8c010880, color=0xa0) returned 0xa0 [0083.716] CreateSolidBrush (color=0xa0) returned 0xffffffff98100860 [0083.716] FillRect (hDC=0xffffffff8c010880, lprc=0x14cef8, hbr=0xffffffff98100860) returned 1 [0083.716] DeleteObject (ho=0xffffffff98100860) returned 1 [0083.716] RestoreDC (hdc=0xffffffff8c010880, nSavedDC=-1) returned 1 [0083.716] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0083.716] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0083.717] GetSystemMetrics (nIndex=42) returned 0 [0083.717] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d0b0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0083.717] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d0b0) returned 0xc [0083.717] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d138 | out: lpRect=0x14d138) returned 1 [0083.717] GetCurrentObject (hdc=0xffffffff8c010880, type=0x1) returned 0x1b00017 [0083.717] GetCurrentObject (hdc=0xffffffff8c010880, type=0x2) returned 0x1900010 [0083.717] GetCurrentObject (hdc=0xffffffff8c010880, type=0x7) returned 0x29050250 [0083.717] GetCurrentObject (hdc=0xffffffff8c010880, type=0x6) returned 0x18a002e [0083.717] SaveDC (hdc=0xffffffff8c010880) returned 2 [0083.717] GetNearestColor (hdc=0xffffffff8c010880, color=0xa0) returned 0xa0 [0083.717] CreateSolidBrush (color=0xa0) returned 0xffffffff99100860 [0083.717] FillRect (hDC=0xffffffff8c010880, lprc=0x14ce28, hbr=0xffffffff99100860) returned 1 [0083.717] DeleteObject (ho=0xffffffff99100860) returned 1 [0083.717] RestoreDC (hdc=0xffffffff8c010880, nSavedDC=-1) returned 1 [0083.718] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0083.718] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0083.719] GetSystemMetrics (nIndex=42) returned 0 [0083.719] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d0b0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0083.719] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d0b0) returned 0xc [0083.719] RestoreDC (hdc=0xffffffff8c010880, nSavedDC=-1) returned 1 [0083.719] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8c010880) returned 0x0 [0083.719] IsAppThemed () returned 0x1 [0083.719] GetThemeAppProperties () returned 0x3 [0083.719] GetThemeAppProperties () returned 0x3 [0083.719] IsAppThemed () returned 0x1 [0083.719] GetThemeAppProperties () returned 0x3 [0083.719] GetThemeAppProperties () returned 0x3 [0083.719] IsThemePartDefined () returned 0x1 [0083.720] GdipCreateRegion (region=0x14d820) returned 0x0 [0083.720] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0083.720] GdipCreateMatrix (matrix=0x14d820) returned 0x0 [0083.720] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0083.720] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14d888) returned 0x0 [0083.720] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0083.720] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0083.720] LocalFree (hMem=0xa931f0) returned 0x0 [0083.720] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0083.720] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0083.720] LocalFree (hMem=0xa931f0) returned 0x0 [0083.720] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0083.720] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d8f0) returned 0x0 [0083.721] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d8b0) returned 0x0 [0083.721] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14d8b0) returned 0x0 [0083.721] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0083.721] GdipGetDC (graphics=0x1afd81d0, hdc=0x14d8f8) returned 0x0 [0083.721] GetCurrentObject (hdc=0xffffffff8c010880, type=0x1) returned 0x1b00017 [0083.721] GetCurrentObject (hdc=0xffffffff8c010880, type=0x2) returned 0x1900010 [0083.721] GetCurrentObject (hdc=0xffffffff8c010880, type=0x7) returned 0x29050250 [0083.721] GetCurrentObject (hdc=0xffffffff8c010880, type=0x6) returned 0x18a002e [0083.721] SaveDC (hdc=0xffffffff8c010880) returned 1 [0083.721] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffa204086f [0083.721] GetClipRgn (hdc=0xffffffff8c010880, hrgn=0xffffffffa204086f) returned 0 [0083.721] SelectClipRgn (hdc=0xffffffff8c010880, hrgn=0xffffffffc5040872) returned 2 [0083.722] DeleteObject (ho=0xffffffffa204086f) returned 1 [0083.722] DeleteObject (ho=0xffffffffc5040872) returned 1 [0083.722] OffsetViewportOrgEx (in: hdc=0xffffffff8c010880, x=0, y=0, lppt=0x220d728 | out: lppt=0x220d728) returned 1 [0083.722] IsAppThemed () returned 0x1 [0083.722] GetThemeAppProperties () returned 0x3 [0083.722] GetThemeAppProperties () returned 0x3 [0083.722] DrawThemeBackground () returned 0x0 [0083.722] RestoreDC (hdc=0xffffffff8c010880, nSavedDC=-1) returned 1 [0083.722] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8c010880) returned 0x0 [0083.722] GdipCreateRegion (region=0x14d810) returned 0x0 [0083.722] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0083.723] GdipCreateMatrix (matrix=0x14d810) returned 0x0 [0083.723] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0083.723] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14d878) returned 0x0 [0083.723] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0083.723] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0083.723] LocalFree (hMem=0xa931f0) returned 0x0 [0083.723] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0083.723] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0083.723] LocalFree (hMem=0xa931f0) returned 0x0 [0083.723] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0083.723] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d8e0) returned 0x0 [0083.723] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d8a0) returned 0x0 [0083.724] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14d8a0) returned 0x0 [0083.724] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0083.724] GdipGetDC (graphics=0x1afd81d0, hdc=0x14d8e8) returned 0x0 [0083.724] GetCurrentObject (hdc=0xffffffff8c010880, type=0x1) returned 0x1b00017 [0083.724] GetCurrentObject (hdc=0xffffffff8c010880, type=0x2) returned 0x1900010 [0083.730] GetCurrentObject (hdc=0xffffffff8c010880, type=0x7) returned 0x29050250 [0083.730] GetCurrentObject (hdc=0xffffffff8c010880, type=0x6) returned 0x18a002e [0083.730] SaveDC (hdc=0xffffffff8c010880) returned 1 [0083.731] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffc6040872 [0083.731] GetClipRgn (hdc=0xffffffff8c010880, hrgn=0xffffffffc6040872) returned 0 [0083.731] SelectClipRgn (hdc=0xffffffff8c010880, hrgn=0xffffffffa304086f) returned 2 [0083.731] DeleteObject (ho=0xffffffffc6040872) returned 1 [0083.731] DeleteObject (ho=0xffffffffa304086f) returned 1 [0083.731] OffsetViewportOrgEx (in: hdc=0xffffffff8c010880, x=0, y=0, lppt=0x220dc00 | out: lppt=0x220dc00) returned 1 [0083.731] IsAppThemed () returned 0x1 [0083.731] GetThemeAppProperties () returned 0x3 [0083.731] GetThemeAppProperties () returned 0x3 [0083.731] GetThemeBackgroundContentRect () returned 0x0 [0083.731] RestoreDC (hdc=0xffffffff8c010880, nSavedDC=-1) returned 1 [0083.731] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8c010880) returned 0x0 [0083.731] IsAppThemed () returned 0x1 [0083.732] GetThemeAppProperties () returned 0x3 [0083.732] GetThemeAppProperties () returned 0x3 [0083.732] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14dac8) returned 0x0 [0083.732] GdipGetDC (graphics=0x1afd81d0, hdc=0x14daa8) returned 0x0 [0083.732] GetCurrentObject (hdc=0xffffffff8c010880, type=0x1) returned 0x1b00017 [0083.732] GetCurrentObject (hdc=0xffffffff8c010880, type=0x2) returned 0x1900010 [0083.732] GetCurrentObject (hdc=0xffffffff8c010880, type=0x7) returned 0x29050250 [0083.732] GetCurrentObject (hdc=0xffffffff8c010880, type=0x6) returned 0x18a002e [0083.732] SaveDC (hdc=0xffffffff8c010880) returned 1 [0083.732] GetTextAlign (hdc=0xffffffff8c010880) returned 0x0 [0083.732] GetTextColor (hdc=0xffffffff8c010880) returned 0x0 [0083.732] GetCurrentObject (hdc=0xffffffff8c010880, type=0x6) returned 0x18a002e [0083.732] GetObjectW (in: h=0x18a002e, c=92, pv=0x14d5e0 | out: pv=0x14d5e0) returned 92 [0083.733] SelectObject (hdc=0xffffffff8c010880, h=0x120a086d) returned 0x18a002e [0083.733] GetBkMode (hdc=0xffffffff8c010880) returned 2 [0083.733] SetBkMode (hdc=0xffffffff8c010880, mode=1) returned 2 [0083.733] DrawTextExW (in: hdc=0xffffffff8c010880, lpchText="Check", cchText=5, lprc=0x14d820, format=0x2415, lpdtp=0x220e1e0 | out: lpchText="Check", lprc=0x14d820) returned 13 [0083.733] DrawTextExW (in: hdc=0xffffffff8c010880, lpchText="Check", cchText=5, lprc=0x14da38, format=0x2015, lpdtp=0x220e1e0 | out: lpchText="Check", lprc=0x14da38) returned 13 [0083.733] RestoreDC (hdc=0xffffffff8c010880, nSavedDC=-1) returned 1 [0083.733] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8c010880) returned 0x0 [0083.733] GetFocus () returned 0x1020c [0083.733] IsAppThemed () returned 0x1 [0083.733] GetThemeAppProperties () returned 0x3 [0083.733] GetThemeAppProperties () returned 0x3 [0083.734] GdipGetDC (graphics=0x1afd81d0, hdc=0x14ddb8) returned 0x0 [0083.734] BitBlt (hdc=0x5010825, x=0, y=0, cx=408, cy=23, hdcSrc=0xffffffff8c010880, x1=0, y1=0, rop=0xcc0020) returned 1 [0083.734] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff8c010880) returned 0x0 [0083.734] SelectPalette (hdc=0x5010825, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0083.734] SelectObject (hdc=0xffffffff8c010880, h=0x185000f) returned 0x29050250 [0083.734] DeleteDC (hdc=0xffffffff8c010880) returned 1 [0083.734] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0083.734] EndPaint (hWnd=0x1020c, lpPaint=0x14dd98) returned 1 [0083.734] MapWindowPoints (in: hWndFrom=0x1020c, hWndTo=0x0, lpPoints=0x220e348, cPoints=0x1 | out: lpPoints=0x220e348) returned 41353803 [0083.734] WindowFromPoint (Point=0x27d00000308) returned 0x1020c [0083.734] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x27d0308) returned 0x1 [0083.735] NotifyWinEvent (event=0x800a, hwnd=0x1020c, idObject=-4, idChild=0) [0083.735] NotifyWinEvent (event=0x800c, hwnd=0x1020c, idObject=-4, idChild=0) [0083.735] SetWindowPos (hWnd=0x10214, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0083.735] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x46, wParam=0x0, lParam=0x14e450) returned 0x0 [0083.735] GetCapture () returned 0x1020c [0083.735] ReleaseCapture () returned 1 [0083.735] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0083.735] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.735] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x27d0308) returned 0x1 [0083.735] IsWindowUnicode (hWnd=0x1020c) returned 1 [0083.736] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.736] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x27d0308) returned 0x1 [0083.736] SetCursor (hCursor=0x10003) returned 0x10003 [0083.736] TranslateMessage (lpMsg=0x14edb0) returned 0 [0083.736] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0083.736] GetKeyState (nVirtKey=1) returned 1 [0083.736] GetKeyState (nVirtKey=2) returned 0 [0083.736] GetKeyState (nVirtKey=4) returned 0 [0083.736] GetKeyState (nVirtKey=5) returned 0 [0083.736] GetKeyState (nVirtKey=6) returned 0 [0083.736] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.736] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.736] WaitMessage () returned 1 [0083.771] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.771] IsWindowUnicode (hWnd=0x201c8) returned 1 [0083.771] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.771] TranslateMessage (lpMsg=0x14edb0) returned 0 [0083.771] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0083.771] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.771] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.772] WaitMessage () returned 1 [0083.802] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.802] IsWindowUnicode (hWnd=0x201ec) returned 1 [0083.802] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.802] TranslateMessage (lpMsg=0x14edb0) returned 0 [0083.802] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0083.802] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.802] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.803] WaitMessage () returned 1 [0083.880] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.880] IsWindowUnicode (hWnd=0x201c8) returned 1 [0083.880] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.881] TranslateMessage (lpMsg=0x14edb0) returned 0 [0083.881] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0083.881] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.881] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.881] WaitMessage () returned 1 [0083.990] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.990] IsWindowUnicode (hWnd=0x201c8) returned 1 [0083.990] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0083.990] TranslateMessage (lpMsg=0x14edb0) returned 0 [0083.990] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0083.990] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.990] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0083.990] WaitMessage () returned 1 [0084.009] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0084.009] IsWindowUnicode (hWnd=0x201e6) returned 1 [0084.009] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0084.010] TranslateMessage (lpMsg=0x14edb0) returned 0 [0084.010] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0084.010] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0084.010] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0084.010] WaitMessage () returned 1 [0084.099] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0084.099] IsWindowUnicode (hWnd=0x201c8) returned 1 [0084.099] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0084.099] TranslateMessage (lpMsg=0x14edb0) returned 0 [0084.099] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0084.099] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0084.099] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0084.099] WaitMessage () returned 1 [0084.208] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0084.208] IsWindowUnicode (hWnd=0x201c8) returned 1 [0084.208] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0084.208] TranslateMessage (lpMsg=0x14edb0) returned 0 [0084.208] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0084.209] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0084.209] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0084.209] WaitMessage () returned 1 [0084.317] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0084.317] IsWindowUnicode (hWnd=0x201c8) returned 1 [0084.317] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0084.317] TranslateMessage (lpMsg=0x14edb0) returned 0 [0084.317] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0084.317] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0084.317] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0084.317] WaitMessage () returned 1 [0084.439] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0084.439] IsWindowUnicode (hWnd=0x301ee) returned 1 [0084.439] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0084.439] TranslateMessage (lpMsg=0x14edb0) returned 0 [0084.439] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0084.440] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0084.440] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0084.440] CoTaskMemFree (pv=0xa692f0) [0084.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0084.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0084.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0084.440] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0084.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0084.440] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0084.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e500) returned 1 [0084.441] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x274 [0084.441] GetFileType (hFile=0x274) returned 0x1 [0084.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e470) returned 1 [0084.441] GetFileType (hFile=0x274) returned 0x1 [0084.441] ReadFile (in: hFile=0x274, lpBuffer=0x2210090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x2210090*, lpNumberOfBytesRead=0x14e5d8*=0x2, lpOverlapped=0x0) returned 1 [0084.441] ReadFile (in: hFile=0x274, lpBuffer=0x2210090, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x2210090*, lpNumberOfBytesRead=0x14e5d8*=0x0, lpOverlapped=0x0) returned 1 [0084.441] CloseHandle (hObject=0x274) returned 1 [0084.443] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0084.443] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0084.443] CoTaskMemFree (pv=0xa692f0) [0084.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0084.443] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0084.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0084.443] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0084.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0084.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0084.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e4c0) returned 1 [0084.444] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x274 [0084.445] GetFileType (hFile=0x274) returned 0x1 [0084.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e430) returned 1 [0084.445] GetFileType (hFile=0x274) returned 0x1 [0084.445] WriteFile (in: hFile=0x274, lpBuffer=0x22133e0*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x14e508, lpOverlapped=0x0 | out: lpBuffer=0x22133e0*, lpNumberOfBytesWritten=0x14e508*=0x2, lpOverlapped=0x0) returned 1 [0084.446] CloseHandle (hObject=0x274) returned 1 [0084.447] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0084.447] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0084.447] GetSystemMetrics (nIndex=42) returned 0 [0084.447] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e600, nMaxCount=5 | out: lpString="4:45") returned 4 [0084.447] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e600) returned 0x4 [0084.447] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0084.447] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0084.447] GetSystemMetrics (nIndex=42) returned 0 [0084.447] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e5a0, nMaxCount=5 | out: lpString="4:45") returned 4 [0084.447] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e5a0) returned 0x4 [0084.447] SetWindowTextW (hWnd=0x201da, lpString="4:44") returned 1 [0084.447] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xc, wParam=0x0, lParam=0x2211104) returned 0x1 [0084.447] GetStockObject (i=5) returned 0x1900015 [0084.447] GetDlgItem (hDlg=0x401fa, nIDDlgItem=131546) returned 0x201da [0084.447] SendMessageW (hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0084.447] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0084.448] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0084.448] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0084.448] GetSystemMetrics (nIndex=42) returned 0 [0084.448] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e460, nMaxCount=5 | out: lpString="4:44") returned 4 [0084.448] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e460) returned 0x4 [0084.448] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0084.448] AdjustWindowRectEx (in: lpRect=0x14e478, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e478) returned 1 [0084.448] SelectObject (hdc=0x8010893, h=0x200a0899) returned 0x120a086d [0084.448] DrawTextExW (in: hdc=0x8010893, lpchText="4:44", cchText=4, lprc=0x14e3e8, format=0x2400, lpdtp=0x2214698 | out: lpchText="4:44", lprc=0x14e3e8) returned 20 [0084.448] InvalidateRect (hWnd=0x201da, lpRect=0x0, bErase=1) returned 1 [0084.448] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0084.448] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0084.449] GetSystemMetrics (nIndex=42) returned 0 [0084.449] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14e3d0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0084.449] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14e3d0) returned 0xc [0084.449] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0084.449] IsWindowUnicode (hWnd=0x201da) returned 1 [0084.449] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0084.449] TranslateMessage (lpMsg=0x14edb0) returned 0 [0084.449] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0084.449] BeginPaint (in: hWnd=0x201da, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0x5010830 [0084.449] SelectPalette (hdc=0x5010830, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0084.449] CreateCompatibleDC (hdc=0x5010830) returned 0xffffffff90010880 [0084.449] SelectObject (hdc=0xffffffff90010880, h=0x29050250) returned 0x185000f [0084.449] GdipCreateFromHDC (hdc=0xffffffff90010880, graphics=0x14e428) returned 0x0 [0084.449] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0084.449] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=40, height=20, combineMode=0x0) returned 0x0 [0084.449] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0084.450] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0084.450] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14e4b8) returned 0x0 [0084.450] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0084.450] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0084.450] LocalFree (hMem=0xa931f0) returned 0x0 [0084.450] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0084.450] GdipCreateRegion (region=0x14e450) returned 0x0 [0084.450] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0084.450] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0084.450] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0084.450] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0084.450] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0084.450] GetSystemMetrics (nIndex=42) returned 0 [0084.450] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:44") returned 4 [0084.450] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0084.450] GetClientRect (in: hWnd=0x201da, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0084.450] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0084.450] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0084.450] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0084.450] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0084.451] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0084.451] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0084.451] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0084.451] LocalFree (hMem=0xa931f0) returned 0x0 [0084.451] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0084.451] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0084.451] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0084.451] LocalFree (hMem=0xa931f0) returned 0x0 [0084.451] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0084.451] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0084.451] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0084.451] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0084.451] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0084.451] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0084.451] GetCurrentObject (hdc=0xffffffff90010880, type=0x1) returned 0x1b00017 [0084.451] GetCurrentObject (hdc=0xffffffff90010880, type=0x2) returned 0x1900010 [0084.451] GetCurrentObject (hdc=0xffffffff90010880, type=0x7) returned 0x29050250 [0084.451] GetCurrentObject (hdc=0xffffffff90010880, type=0x6) returned 0x18a002e [0084.452] SaveDC (hdc=0xffffffff90010880) returned 1 [0084.452] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffa404086f [0084.452] GetClipRgn (hdc=0xffffffff90010880, hrgn=0xffffffffa404086f) returned 0 [0084.452] SelectClipRgn (hdc=0xffffffff90010880, hrgn=0xffffffffca040872) returned 2 [0084.452] DeleteObject (ho=0xffffffffa404086f) returned 1 [0084.452] DeleteObject (ho=0xffffffffca040872) returned 1 [0084.452] OffsetViewportOrgEx (in: hdc=0xffffffff90010880, x=0, y=0, lppt=0x2214d98 | out: lppt=0x2214d98) returned 1 [0084.452] GetNearestColor (hdc=0xffffffff90010880, color=0xa0) returned 0xa0 [0084.452] CreateSolidBrush (color=0xa0) returned 0xffffffff9a100860 [0084.452] FillRect (hDC=0xffffffff90010880, lprc=0x14e1e8, hbr=0xffffffff9a100860) returned 1 [0084.452] DeleteObject (ho=0xffffffff9a100860) returned 1 [0084.452] RestoreDC (hdc=0xffffffff90010880, nSavedDC=-1) returned 1 [0084.452] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff90010880) returned 0x0 [0084.452] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd440dbd) returned 0x0 [0084.452] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0084.452] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0084.452] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0084.452] GetSystemMetrics (nIndex=42) returned 0 [0084.452] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:44") returned 4 [0084.453] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0084.453] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0084.453] GetCurrentObject (hdc=0xffffffff90010880, type=0x1) returned 0x1b00017 [0084.453] GetCurrentObject (hdc=0xffffffff90010880, type=0x2) returned 0x1900010 [0084.453] GetCurrentObject (hdc=0xffffffff90010880, type=0x7) returned 0x29050250 [0084.453] GetCurrentObject (hdc=0xffffffff90010880, type=0x6) returned 0x18a002e [0084.453] SaveDC (hdc=0xffffffff90010880) returned 1 [0084.453] GetNearestColor (hdc=0xffffffff90010880, color=0xffffff) returned 0xffffff [0084.453] RestoreDC (hdc=0xffffffff90010880, nSavedDC=-1) returned 1 [0084.453] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff90010880) returned 0x0 [0084.453] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0084.453] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0084.453] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0084.453] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0084.454] GetCurrentObject (hdc=0xffffffff90010880, type=0x1) returned 0x1b00017 [0084.454] GetCurrentObject (hdc=0xffffffff90010880, type=0x2) returned 0x1900010 [0084.454] GetCurrentObject (hdc=0xffffffff90010880, type=0x7) returned 0x29050250 [0084.454] GetCurrentObject (hdc=0xffffffff90010880, type=0x6) returned 0x18a002e [0084.454] SaveDC (hdc=0xffffffff90010880) returned 1 [0084.454] GetTextAlign (hdc=0xffffffff90010880) returned 0x0 [0084.454] GetTextColor (hdc=0xffffffff90010880) returned 0x0 [0084.454] SetTextColor (hdc=0xffffffff90010880, color=0xffffff) returned 0x0 [0084.454] GetCurrentObject (hdc=0xffffffff90010880, type=0x6) returned 0x18a002e [0084.454] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0084.454] SelectObject (hdc=0xffffffff90010880, h=0x200a0899) returned 0x18a002e [0084.454] GetBkMode (hdc=0xffffffff90010880) returned 2 [0084.454] SetBkMode (hdc=0xffffffff90010880, mode=1) returned 2 [0084.454] DrawTextExW (in: hdc=0xffffffff90010880, lpchText="4:44", cchText=4, lprc=0x14e1c8, format=0x0, lpdtp=0x2215628 | out: lpchText="4:44", lprc=0x14e1c8) returned 20 [0084.454] RestoreDC (hdc=0xffffffff90010880, nSavedDC=-1) returned 1 [0084.454] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff90010880) returned 0x0 [0084.454] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0084.455] BitBlt (hdc=0x5010830, x=0, y=0, cx=40, cy=20, hdcSrc=0xffffffff90010880, x1=0, y1=0, rop=0xcc0020) returned 1 [0084.455] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff90010880) returned 0x0 [0084.455] SelectPalette (hdc=0x5010830, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0084.455] SelectObject (hdc=0xffffffff90010880, h=0x185000f) returned 0x29050250 [0084.455] DeleteDC (hdc=0xffffffff90010880) returned 1 [0084.455] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0084.455] EndPaint (hWnd=0x201da, lpPaint=0x14e448) returned 1 [0084.455] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0084.455] IsWindowUnicode (hWnd=0x201c8) returned 1 [0084.455] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0084.455] TranslateMessage (lpMsg=0x14edb0) returned 0 [0084.455] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0084.455] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0084.455] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0084.455] WaitMessage () returned 1 [0084.535] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0084.536] IsWindowUnicode (hWnd=0x201c8) returned 1 [0084.536] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0084.536] TranslateMessage (lpMsg=0x14edb0) returned 0 [0084.536] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0084.536] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0084.536] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0084.536] WaitMessage () returned 1 [0084.645] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0084.645] IsWindowUnicode (hWnd=0x201c8) returned 1 [0084.645] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0084.645] TranslateMessage (lpMsg=0x14edb0) returned 0 [0084.645] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0084.645] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0084.645] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0084.645] WaitMessage () returned 1 [0084.754] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0084.754] IsWindowUnicode (hWnd=0x201c8) returned 1 [0084.754] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0084.754] TranslateMessage (lpMsg=0x14edb0) returned 0 [0084.754] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0084.754] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0084.754] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0084.754] WaitMessage () returned 1 [0084.864] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0084.864] IsWindowUnicode (hWnd=0x201c8) returned 1 [0084.864] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0084.864] TranslateMessage (lpMsg=0x14edb0) returned 0 [0084.864] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0084.864] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0084.864] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0084.864] WaitMessage () returned 1 [0084.973] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0084.973] IsWindowUnicode (hWnd=0x201c8) returned 1 [0084.973] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0084.973] TranslateMessage (lpMsg=0x14edb0) returned 0 [0084.973] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0084.973] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0084.973] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0084.973] WaitMessage () returned 1 [0085.082] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0085.082] IsWindowUnicode (hWnd=0x201c8) returned 1 [0085.082] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0085.082] TranslateMessage (lpMsg=0x14edb0) returned 0 [0085.082] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0085.082] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0085.082] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0085.082] WaitMessage () returned 1 [0085.100] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0085.100] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x84, wParam=0x0, lParam=0x1f8031a) returned 0x1 [0085.100] IsWindowUnicode (hWnd=0x401fa) returned 1 [0085.100] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0085.100] TranslateMessage (lpMsg=0x14edb0) returned 0 [0085.100] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0085.100] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0085.100] InvalidateRect (hWnd=0x1020c, lpRect=0x0, bErase=0) returned 1 [0085.100] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0085.100] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x84, wParam=0x0, lParam=0x1f8031a) returned 0x1 [0085.100] IsWindowUnicode (hWnd=0x401fa) returned 1 [0085.100] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0085.100] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x84, wParam=0x0, lParam=0x1f8031a) returned 0x1 [0085.101] SetCursor (hCursor=0x10003) returned 0x10003 [0085.101] TranslateMessage (lpMsg=0x14edb0) returned 0 [0085.101] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0085.101] _TrackMouseEvent (in: lpEventTrack=0x218fcb8 | out: lpEventTrack=0x218fcb8) returned 1 [0085.101] SendMessageW (hWnd=0x401fa, Msg=0xc12f, wParam=0x0, lParam=0x0) returned 0x0 [0085.101] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xc12f, wParam=0x0, lParam=0x0) returned 0x0 [0085.101] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x200, wParam=0x0, lParam=0x12b0173) returned 0x0 [0085.101] GetKeyState (nVirtKey=1) returned 1 [0085.101] GetKeyState (nVirtKey=2) returned 0 [0085.101] GetKeyState (nVirtKey=4) returned 0 [0085.101] GetKeyState (nVirtKey=5) returned 0 [0085.101] GetKeyState (nVirtKey=6) returned 0 [0085.101] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0085.101] IsWindowUnicode (hWnd=0x1020c) returned 1 [0085.101] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0085.101] TranslateMessage (lpMsg=0x14edb0) returned 0 [0085.101] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0085.101] BeginPaint (in: hWnd=0x1020c, lpPaint=0x14e478 | out: lpPaint=0x14e478) returned 0x5010825 [0085.101] SelectPalette (hdc=0x5010825, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0085.101] CreateCompatibleDC (hdc=0x5010825) returned 0xffffffff91010880 [0085.101] SelectObject (hdc=0xffffffff91010880, h=0x29050250) returned 0x185000f [0085.101] GdipCreateFromHDC (hdc=0xffffffff91010880, graphics=0x14e3f8) returned 0x0 [0085.102] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0085.102] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=408, height=23, combineMode=0x0) returned 0x0 [0085.102] GdipCreateMatrix (matrix=0x14e420) returned 0x0 [0085.102] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0085.102] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14e488) returned 0x0 [0085.102] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0085.102] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0085.102] LocalFree (hMem=0xa931f0) returned 0x0 [0085.102] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0085.102] GdipCreateRegion (region=0x14e420) returned 0x0 [0085.102] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0085.102] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e480) returned 0x0 [0085.102] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e520) returned 0x0 [0085.102] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd420dbd) returned 0x0 [0085.102] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0085.102] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e198) returned 0x0 [0085.102] GetCurrentObject (hdc=0xffffffff91010880, type=0x1) returned 0x1b00017 [0085.102] GetCurrentObject (hdc=0xffffffff91010880, type=0x2) returned 0x1900010 [0085.102] GetCurrentObject (hdc=0xffffffff91010880, type=0x7) returned 0x29050250 [0085.102] GetCurrentObject (hdc=0xffffffff91010880, type=0x6) returned 0x18a002e [0085.103] SaveDC (hdc=0xffffffff91010880) returned 1 [0085.103] GetNearestColor (hdc=0xffffffff91010880, color=0xa0) returned 0xa0 [0085.103] GetNearestColor (hdc=0xffffffff91010880, color=0x35) returned 0x35 [0085.103] GetNearestColor (hdc=0xffffffff91010880, color=0x0) returned 0x0 [0085.103] GetNearestColor (hdc=0xffffffff91010880, color=0x4848e5) returned 0x4848e5 [0085.103] GetNearestColor (hdc=0xffffffff91010880, color=0x0) returned 0x0 [0085.103] GetNearestColor (hdc=0xffffffff91010880, color=0x5151ff) returned 0x5151ff [0085.103] GetNearestColor (hdc=0xffffffff91010880, color=0x4848e5) returned 0x4848e5 [0085.103] GetNearestColor (hdc=0xffffffff91010880, color=0xc0) returned 0xc0 [0085.103] GetNearestColor (hdc=0xffffffff91010880, color=0x0) returned 0x0 [0085.103] RestoreDC (hdc=0xffffffff91010880, nSavedDC=-1) returned 1 [0085.103] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff91010880) returned 0x0 [0085.103] IsAppThemed () returned 0x1 [0085.103] GetThemeAppProperties () returned 0x3 [0085.103] GetThemeAppProperties () returned 0x3 [0085.103] IsAppThemed () returned 0x1 [0085.103] GetThemeAppProperties () returned 0x3 [0085.103] GetThemeAppProperties () returned 0x3 [0085.103] SelectObject (hdc=0x8010893, h=0x120a086d) returned 0x200a0899 [0085.103] DrawTextExW (in: hdc=0x8010893, lpchText="Check", cchText=5, lprc=0x14de08, format=0x2415, lpdtp=0x2216328 | out: lpchText="Check", lprc=0x14de08) returned 13 [0085.104] IsAppThemed () returned 0x1 [0085.104] GetThemeAppProperties () returned 0x3 [0085.104] GetThemeAppProperties () returned 0x3 [0085.104] IsAppThemed () returned 0x1 [0085.104] GetThemeAppProperties () returned 0x3 [0085.104] GetThemeAppProperties () returned 0x3 [0085.104] GetFocus () returned 0x1020c [0085.104] IsAppThemed () returned 0x1 [0085.104] GetThemeAppProperties () returned 0x3 [0085.104] GetThemeAppProperties () returned 0x3 [0085.104] IsAppThemed () returned 0x1 [0085.104] GetThemeAppProperties () returned 0x3 [0085.104] GetThemeAppProperties () returned 0x3 [0085.104] IsThemePartDefined () returned 0x1 [0085.104] IsAppThemed () returned 0x1 [0085.104] GetThemeAppProperties () returned 0x3 [0085.104] GetThemeAppProperties () returned 0x3 [0085.104] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0085.104] IsAppThemed () returned 0x1 [0085.104] GetThemeAppProperties () returned 0x3 [0085.104] GetThemeAppProperties () returned 0x3 [0085.104] IsAppThemed () returned 0x1 [0085.104] GetThemeAppProperties () returned 0x3 [0085.104] GetThemeAppProperties () returned 0x3 [0085.104] IsThemePartDefined () returned 0x1 [0085.104] GdipCreateRegion (region=0x14df00) returned 0x0 [0085.104] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0085.104] GdipCreateMatrix (matrix=0x14df00) returned 0x0 [0085.104] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0085.105] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14df68) returned 0x0 [0085.105] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0085.105] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0085.105] LocalFree (hMem=0xa931f0) returned 0x0 [0085.105] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0085.105] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0085.105] LocalFree (hMem=0xa931f0) returned 0x0 [0085.105] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0085.105] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14dfd0) returned 0x0 [0085.105] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df90) returned 0x0 [0085.105] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df90) returned 0x0 [0085.105] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0085.105] GdipGetDC (graphics=0x1afd81d0, hdc=0x14dfd8) returned 0x0 [0085.105] GetCurrentObject (hdc=0xffffffff91010880, type=0x1) returned 0x1b00017 [0085.105] GetCurrentObject (hdc=0xffffffff91010880, type=0x2) returned 0x1900010 [0085.105] GetCurrentObject (hdc=0xffffffff91010880, type=0x7) returned 0x29050250 [0085.105] GetCurrentObject (hdc=0xffffffff91010880, type=0x6) returned 0x18a002e [0085.105] SaveDC (hdc=0xffffffff91010880) returned 1 [0085.105] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffcb040872 [0085.105] GetClipRgn (hdc=0xffffffff91010880, hrgn=0xffffffffcb040872) returned 0 [0085.105] SelectClipRgn (hdc=0xffffffff91010880, hrgn=0xffffffffa704086f) returned 2 [0085.106] DeleteObject (ho=0xffffffffcb040872) returned 1 [0085.106] DeleteObject (ho=0xffffffffa704086f) returned 1 [0085.106] OffsetViewportOrgEx (in: hdc=0xffffffff91010880, x=0, y=0, lppt=0x2216d10 | out: lppt=0x2216d10) returned 1 [0085.106] DrawThemeParentBackground () returned 0x0 [0085.106] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14db88 | out: lpwndpl=0x14db88) returned 1 [0085.106] GetClientRect (in: hWnd=0x401fa, lpRect=0x14daa0 | out: lpRect=0x14daa0) returned 1 [0085.106] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0085.106] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0085.106] GetSystemMetrics (nIndex=42) returned 0 [0085.106] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d800, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0085.106] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d800) returned 0xc [0085.106] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d888 | out: lpRect=0x14d888) returned 1 [0085.106] GetCurrentObject (hdc=0xffffffff91010880, type=0x1) returned 0x1b00017 [0085.106] GetCurrentObject (hdc=0xffffffff91010880, type=0x2) returned 0x1900010 [0085.106] GetCurrentObject (hdc=0xffffffff91010880, type=0x7) returned 0x29050250 [0085.106] GetCurrentObject (hdc=0xffffffff91010880, type=0x6) returned 0x18a002e [0085.106] SaveDC (hdc=0xffffffff91010880) returned 2 [0085.106] GetNearestColor (hdc=0xffffffff91010880, color=0xa0) returned 0xa0 [0085.106] CreateSolidBrush (color=0xa0) returned 0xffffffff9b100860 [0085.106] FillRect (hDC=0xffffffff91010880, lprc=0x14d578, hbr=0xffffffff9b100860) returned 1 [0085.107] DeleteObject (ho=0xffffffff9b100860) returned 1 [0085.107] RestoreDC (hdc=0xffffffff91010880, nSavedDC=-1) returned 1 [0085.107] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0085.107] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0085.107] GetSystemMetrics (nIndex=42) returned 0 [0085.107] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0085.107] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0085.107] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d7b8 | out: lpRect=0x14d7b8) returned 1 [0085.107] GetCurrentObject (hdc=0xffffffff91010880, type=0x1) returned 0x1b00017 [0085.107] GetCurrentObject (hdc=0xffffffff91010880, type=0x2) returned 0x1900010 [0085.107] GetCurrentObject (hdc=0xffffffff91010880, type=0x7) returned 0x29050250 [0085.107] GetCurrentObject (hdc=0xffffffff91010880, type=0x6) returned 0x18a002e [0085.107] SaveDC (hdc=0xffffffff91010880) returned 2 [0085.107] GetNearestColor (hdc=0xffffffff91010880, color=0xa0) returned 0xa0 [0085.107] CreateSolidBrush (color=0xa0) returned 0xffffffff9c100860 [0085.107] FillRect (hDC=0xffffffff91010880, lprc=0x14d4a8, hbr=0xffffffff9c100860) returned 1 [0085.107] DeleteObject (ho=0xffffffff9c100860) returned 1 [0085.107] RestoreDC (hdc=0xffffffff91010880, nSavedDC=-1) returned 1 [0085.107] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0085.107] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0085.108] GetSystemMetrics (nIndex=42) returned 0 [0085.108] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0085.108] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0085.108] RestoreDC (hdc=0xffffffff91010880, nSavedDC=-1) returned 1 [0085.108] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff91010880) returned 0x0 [0085.108] IsAppThemed () returned 0x1 [0085.108] GetThemeAppProperties () returned 0x3 [0085.108] GetThemeAppProperties () returned 0x3 [0085.108] IsAppThemed () returned 0x1 [0085.108] GetThemeAppProperties () returned 0x3 [0085.108] GetThemeAppProperties () returned 0x3 [0085.108] IsThemePartDefined () returned 0x1 [0085.108] GdipCreateRegion (region=0x14dea0) returned 0x0 [0085.108] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0085.108] GdipCreateMatrix (matrix=0x14dea0) returned 0x0 [0085.108] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0085.108] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14df08) returned 0x0 [0085.108] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0085.108] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0085.108] LocalFree (hMem=0xa931f0) returned 0x0 [0085.108] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0085.108] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0085.108] LocalFree (hMem=0xa931f0) returned 0x0 [0085.109] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0085.109] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df70) returned 0x0 [0085.109] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df30) returned 0x0 [0085.109] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df30) returned 0x0 [0085.109] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0085.109] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df78) returned 0x0 [0085.109] GetCurrentObject (hdc=0xffffffff91010880, type=0x1) returned 0x1b00017 [0085.109] GetCurrentObject (hdc=0xffffffff91010880, type=0x2) returned 0x1900010 [0085.109] GetCurrentObject (hdc=0xffffffff91010880, type=0x7) returned 0x29050250 [0085.109] GetCurrentObject (hdc=0xffffffff91010880, type=0x6) returned 0x18a002e [0085.109] SaveDC (hdc=0xffffffff91010880) returned 1 [0085.109] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffa804086f [0085.109] GetClipRgn (hdc=0xffffffff91010880, hrgn=0xffffffffa804086f) returned 0 [0085.109] SelectClipRgn (hdc=0xffffffff91010880, hrgn=0xffffffffcd040872) returned 2 [0085.109] DeleteObject (ho=0xffffffffa804086f) returned 1 [0085.109] DeleteObject (ho=0xffffffffcd040872) returned 1 [0085.109] OffsetViewportOrgEx (in: hdc=0xffffffff91010880, x=0, y=0, lppt=0x2217b18 | out: lppt=0x2217b18) returned 1 [0085.109] IsAppThemed () returned 0x1 [0085.109] GetThemeAppProperties () returned 0x3 [0085.109] GetThemeAppProperties () returned 0x3 [0085.109] DrawThemeBackground () returned 0x0 [0085.110] RestoreDC (hdc=0xffffffff91010880, nSavedDC=-1) returned 1 [0085.110] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff91010880) returned 0x0 [0085.110] GdipCreateRegion (region=0x14de90) returned 0x0 [0085.110] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0085.110] GdipCreateMatrix (matrix=0x14de90) returned 0x0 [0085.110] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0085.110] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14def8) returned 0x0 [0085.110] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0085.110] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0085.110] LocalFree (hMem=0xa931f0) returned 0x0 [0085.110] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0085.110] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0085.110] LocalFree (hMem=0xa931f0) returned 0x0 [0085.110] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0085.110] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df60) returned 0x0 [0085.110] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df20) returned 0x0 [0085.110] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df20) returned 0x0 [0085.110] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0085.110] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df68) returned 0x0 [0085.110] GetCurrentObject (hdc=0xffffffff91010880, type=0x1) returned 0x1b00017 [0085.111] GetCurrentObject (hdc=0xffffffff91010880, type=0x2) returned 0x1900010 [0085.111] GetCurrentObject (hdc=0xffffffff91010880, type=0x7) returned 0x29050250 [0085.111] GetCurrentObject (hdc=0xffffffff91010880, type=0x6) returned 0x18a002e [0085.111] SaveDC (hdc=0xffffffff91010880) returned 1 [0085.111] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffce040872 [0085.111] GetClipRgn (hdc=0xffffffff91010880, hrgn=0xffffffffce040872) returned 0 [0085.111] SelectClipRgn (hdc=0xffffffff91010880, hrgn=0xffffffffa904086f) returned 2 [0085.111] DeleteObject (ho=0xffffffffce040872) returned 1 [0085.111] DeleteObject (ho=0xffffffffa904086f) returned 1 [0085.111] OffsetViewportOrgEx (in: hdc=0xffffffff91010880, x=0, y=0, lppt=0x2217ff0 | out: lppt=0x2217ff0) returned 1 [0085.111] IsAppThemed () returned 0x1 [0085.111] GetThemeAppProperties () returned 0x3 [0085.111] GetThemeAppProperties () returned 0x3 [0085.111] GetThemeBackgroundContentRect () returned 0x0 [0085.111] RestoreDC (hdc=0xffffffff91010880, nSavedDC=-1) returned 1 [0085.111] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff91010880) returned 0x0 [0085.111] IsAppThemed () returned 0x1 [0085.111] GetThemeAppProperties () returned 0x3 [0085.111] GetThemeAppProperties () returned 0x3 [0085.111] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e148) returned 0x0 [0085.111] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e128) returned 0x0 [0085.111] GetCurrentObject (hdc=0xffffffff91010880, type=0x1) returned 0x1b00017 [0085.112] GetCurrentObject (hdc=0xffffffff91010880, type=0x2) returned 0x1900010 [0085.112] GetCurrentObject (hdc=0xffffffff91010880, type=0x7) returned 0x29050250 [0085.112] GetCurrentObject (hdc=0xffffffff91010880, type=0x6) returned 0x18a002e [0085.112] SaveDC (hdc=0xffffffff91010880) returned 1 [0085.112] GetTextAlign (hdc=0xffffffff91010880) returned 0x0 [0085.112] GetTextColor (hdc=0xffffffff91010880) returned 0x0 [0085.112] GetCurrentObject (hdc=0xffffffff91010880, type=0x6) returned 0x18a002e [0085.128] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dc60 | out: pv=0x14dc60) returned 92 [0085.128] SelectObject (hdc=0xffffffff91010880, h=0x120a086d) returned 0x18a002e [0085.128] GetBkMode (hdc=0xffffffff91010880) returned 2 [0085.128] SetBkMode (hdc=0xffffffff91010880, mode=1) returned 2 [0085.128] DrawTextExW (in: hdc=0xffffffff91010880, lpchText="Check", cchText=5, lprc=0x14dea0, format=0x2415, lpdtp=0x22185d0 | out: lpchText="Check", lprc=0x14dea0) returned 13 [0085.129] DrawTextExW (in: hdc=0xffffffff91010880, lpchText="Check", cchText=5, lprc=0x14e0b8, format=0x2015, lpdtp=0x22185d0 | out: lpchText="Check", lprc=0x14e0b8) returned 13 [0085.129] RestoreDC (hdc=0xffffffff91010880, nSavedDC=-1) returned 1 [0085.129] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff91010880) returned 0x0 [0085.129] GetFocus () returned 0x1020c [0085.129] IsAppThemed () returned 0x1 [0085.129] GetThemeAppProperties () returned 0x3 [0085.129] GetThemeAppProperties () returned 0x3 [0085.129] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e438) returned 0x0 [0085.129] BitBlt (hdc=0x5010825, x=0, y=0, cx=408, cy=23, hdcSrc=0xffffffff91010880, x1=0, y1=0, rop=0xcc0020) returned 1 [0085.129] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff91010880) returned 0x0 [0085.129] SelectPalette (hdc=0x5010825, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0085.129] SelectObject (hdc=0xffffffff91010880, h=0x185000f) returned 0x29050250 [0085.129] DeleteDC (hdc=0xffffffff91010880) returned 1 [0085.129] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0085.129] EndPaint (hWnd=0x1020c, lpPaint=0x14e418) returned 1 [0085.129] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0085.129] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0085.129] WaitMessage () returned 1 [0085.191] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0085.191] IsWindowUnicode (hWnd=0x201c8) returned 1 [0085.191] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0085.191] TranslateMessage (lpMsg=0x14edb0) returned 0 [0085.191] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0085.191] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0085.191] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0085.191] WaitMessage () returned 1 [0085.207] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0085.207] IsWindowUnicode (hWnd=0x401fa) returned 1 [0085.207] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0085.207] TranslateMessage (lpMsg=0x14edb0) returned 0 [0085.207] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0085.207] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0085.207] IsWindowUnicode (hWnd=0x401fa) returned 1 [0085.207] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0085.207] TranslateMessage (lpMsg=0x14edb0) returned 0 [0085.207] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0085.207] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x2a1, wParam=0x0, lParam=0x12b0173) returned 0x0 [0085.207] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0085.207] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0085.207] WaitMessage () returned 1 [0085.300] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0085.300] IsWindowUnicode (hWnd=0x201c8) returned 1 [0085.300] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0085.300] TranslateMessage (lpMsg=0x14edb0) returned 0 [0085.300] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0085.300] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0085.300] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0085.300] WaitMessage () returned 1 [0085.409] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0085.409] IsWindowUnicode (hWnd=0x201c8) returned 1 [0085.409] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0085.409] TranslateMessage (lpMsg=0x14edb0) returned 0 [0085.409] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0085.409] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0085.409] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0085.410] WaitMessage () returned 1 [0085.440] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0085.440] IsWindowUnicode (hWnd=0x301ee) returned 1 [0085.440] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0085.441] TranslateMessage (lpMsg=0x14edb0) returned 0 [0085.441] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0085.442] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0085.442] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0085.442] CoTaskMemFree (pv=0xa692f0) [0085.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0085.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0085.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0085.442] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0085.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0085.442] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0085.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e500) returned 1 [0085.442] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x274 [0085.442] GetFileType (hFile=0x274) returned 0x1 [0085.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e470) returned 1 [0085.442] GetFileType (hFile=0x274) returned 0x1 [0085.442] ReadFile (in: hFile=0x274, lpBuffer=0x221a348, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x221a348*, lpNumberOfBytesRead=0x14e5d8*=0x2, lpOverlapped=0x0) returned 1 [0085.443] ReadFile (in: hFile=0x274, lpBuffer=0x221a348, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x221a348*, lpNumberOfBytesRead=0x14e5d8*=0x0, lpOverlapped=0x0) returned 1 [0085.443] CloseHandle (hObject=0x274) returned 1 [0085.444] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0085.444] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0085.444] CoTaskMemFree (pv=0xa692f0) [0085.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0085.444] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0085.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0085.444] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0085.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0085.445] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0085.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e4c0) returned 1 [0085.445] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x274 [0085.446] GetFileType (hFile=0x274) returned 0x1 [0085.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e430) returned 1 [0085.446] GetFileType (hFile=0x274) returned 0x1 [0085.446] WriteFile (in: hFile=0x274, lpBuffer=0x221d698*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x14e508, lpOverlapped=0x0 | out: lpBuffer=0x221d698*, lpNumberOfBytesWritten=0x14e508*=0x2, lpOverlapped=0x0) returned 1 [0085.447] CloseHandle (hObject=0x274) returned 1 [0085.448] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0085.448] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0085.448] GetSystemMetrics (nIndex=42) returned 0 [0085.448] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e600, nMaxCount=5 | out: lpString="4:44") returned 4 [0085.448] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e600) returned 0x4 [0085.448] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0085.448] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0085.448] GetSystemMetrics (nIndex=42) returned 0 [0085.448] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e5a0, nMaxCount=5 | out: lpString="4:44") returned 4 [0085.448] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e5a0) returned 0x4 [0085.448] SetWindowTextW (hWnd=0x201da, lpString="4:43") returned 1 [0085.448] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xc, wParam=0x0, lParam=0x221b3bc) returned 0x1 [0085.448] GetStockObject (i=5) returned 0x1900015 [0085.448] GetDlgItem (hDlg=0x401fa, nIDDlgItem=131546) returned 0x201da [0085.448] SendMessageW (hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0085.448] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0085.449] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0085.449] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0085.449] GetSystemMetrics (nIndex=42) returned 0 [0085.449] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e460, nMaxCount=5 | out: lpString="4:43") returned 4 [0085.449] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e460) returned 0x4 [0085.449] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0085.449] AdjustWindowRectEx (in: lpRect=0x14e478, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e478) returned 1 [0085.449] SelectObject (hdc=0x8010893, h=0x200a0899) returned 0x120a086d [0085.449] DrawTextExW (in: hdc=0x8010893, lpchText="4:43", cchText=4, lprc=0x14e3e8, format=0x2400, lpdtp=0x221e950 | out: lpchText="4:43", lprc=0x14e3e8) returned 20 [0085.449] InvalidateRect (hWnd=0x201da, lpRect=0x0, bErase=1) returned 1 [0085.449] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0085.449] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0085.449] GetSystemMetrics (nIndex=42) returned 0 [0085.449] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14e3d0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0085.449] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14e3d0) returned 0xc [0085.450] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0085.450] IsWindowUnicode (hWnd=0x201da) returned 1 [0085.450] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0085.450] TranslateMessage (lpMsg=0x14edb0) returned 0 [0085.450] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0085.450] BeginPaint (in: hWnd=0x201da, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0x5010830 [0085.450] SelectPalette (hdc=0x5010830, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0085.450] CreateCompatibleDC (hdc=0x5010830) returned 0xffffffff92010880 [0085.450] SelectObject (hdc=0xffffffff92010880, h=0x29050250) returned 0x185000f [0085.450] GdipCreateFromHDC (hdc=0xffffffff92010880, graphics=0x14e428) returned 0x0 [0085.450] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0085.450] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=40, height=20, combineMode=0x0) returned 0x0 [0085.450] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0085.450] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0085.450] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14e4b8) returned 0x0 [0085.450] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0085.450] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0085.450] LocalFree (hMem=0xa931f0) returned 0x0 [0085.451] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0085.451] GdipCreateRegion (region=0x14e450) returned 0x0 [0085.451] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0085.451] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0085.451] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0085.451] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0085.451] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0085.451] GetSystemMetrics (nIndex=42) returned 0 [0085.451] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:43") returned 4 [0085.451] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0085.451] GetClientRect (in: hWnd=0x201da, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0085.451] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0085.451] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0085.451] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0085.451] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0085.451] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0085.451] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0085.451] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0085.451] LocalFree (hMem=0xa931f0) returned 0x0 [0085.451] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0085.451] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0085.451] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0085.452] LocalFree (hMem=0xa931f0) returned 0x0 [0085.452] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0085.452] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0085.452] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0085.452] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0085.452] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0085.452] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0085.452] GetCurrentObject (hdc=0xffffffff92010880, type=0x1) returned 0x1b00017 [0085.452] GetCurrentObject (hdc=0xffffffff92010880, type=0x2) returned 0x1900010 [0085.452] GetCurrentObject (hdc=0xffffffff92010880, type=0x7) returned 0x29050250 [0085.452] GetCurrentObject (hdc=0xffffffff92010880, type=0x6) returned 0x18a002e [0085.452] SaveDC (hdc=0xffffffff92010880) returned 1 [0085.452] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffaa04086f [0085.452] GetClipRgn (hdc=0xffffffff92010880, hrgn=0xffffffffaa04086f) returned 0 [0085.452] SelectClipRgn (hdc=0xffffffff92010880, hrgn=0xffffffffd2040872) returned 2 [0085.452] DeleteObject (ho=0xffffffffaa04086f) returned 1 [0085.452] DeleteObject (ho=0xffffffffd2040872) returned 1 [0085.452] OffsetViewportOrgEx (in: hdc=0xffffffff92010880, x=0, y=0, lppt=0x221f050 | out: lppt=0x221f050) returned 1 [0085.453] GetNearestColor (hdc=0xffffffff92010880, color=0xa0) returned 0xa0 [0085.453] CreateSolidBrush (color=0xa0) returned 0xffffffff9d100860 [0085.453] FillRect (hDC=0xffffffff92010880, lprc=0x14e1e8, hbr=0xffffffff9d100860) returned 1 [0085.453] DeleteObject (ho=0xffffffff9d100860) returned 1 [0085.453] RestoreDC (hdc=0xffffffff92010880, nSavedDC=-1) returned 1 [0085.453] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff92010880) returned 0x0 [0085.453] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd400dbd) returned 0x0 [0085.453] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0085.453] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0085.453] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0085.453] GetSystemMetrics (nIndex=42) returned 0 [0085.453] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:43") returned 4 [0085.453] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0085.453] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0085.453] GetCurrentObject (hdc=0xffffffff92010880, type=0x1) returned 0x1b00017 [0085.453] GetCurrentObject (hdc=0xffffffff92010880, type=0x2) returned 0x1900010 [0085.453] GetCurrentObject (hdc=0xffffffff92010880, type=0x7) returned 0x29050250 [0085.453] GetCurrentObject (hdc=0xffffffff92010880, type=0x6) returned 0x18a002e [0085.453] SaveDC (hdc=0xffffffff92010880) returned 1 [0085.453] GetNearestColor (hdc=0xffffffff92010880, color=0xffffff) returned 0xffffff [0085.454] RestoreDC (hdc=0xffffffff92010880, nSavedDC=-1) returned 1 [0085.454] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff92010880) returned 0x0 [0085.454] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0085.454] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0085.454] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0085.454] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0085.454] GetCurrentObject (hdc=0xffffffff92010880, type=0x1) returned 0x1b00017 [0085.454] GetCurrentObject (hdc=0xffffffff92010880, type=0x2) returned 0x1900010 [0085.454] GetCurrentObject (hdc=0xffffffff92010880, type=0x7) returned 0x29050250 [0085.454] GetCurrentObject (hdc=0xffffffff92010880, type=0x6) returned 0x18a002e [0085.454] SaveDC (hdc=0xffffffff92010880) returned 1 [0085.454] GetTextAlign (hdc=0xffffffff92010880) returned 0x0 [0085.454] GetTextColor (hdc=0xffffffff92010880) returned 0x0 [0085.454] SetTextColor (hdc=0xffffffff92010880, color=0xffffff) returned 0x0 [0085.454] GetCurrentObject (hdc=0xffffffff92010880, type=0x6) returned 0x18a002e [0085.454] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0085.454] SelectObject (hdc=0xffffffff92010880, h=0x200a0899) returned 0x18a002e [0085.454] GetBkMode (hdc=0xffffffff92010880) returned 2 [0085.454] SetBkMode (hdc=0xffffffff92010880, mode=1) returned 2 [0085.455] DrawTextExW (in: hdc=0xffffffff92010880, lpchText="4:43", cchText=4, lprc=0x14e1c8, format=0x0, lpdtp=0x221f8e0 | out: lpchText="4:43", lprc=0x14e1c8) returned 20 [0085.455] RestoreDC (hdc=0xffffffff92010880, nSavedDC=-1) returned 1 [0085.455] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff92010880) returned 0x0 [0085.455] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0085.455] BitBlt (hdc=0x5010830, x=0, y=0, cx=40, cy=20, hdcSrc=0xffffffff92010880, x1=0, y1=0, rop=0xcc0020) returned 1 [0085.455] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff92010880) returned 0x0 [0085.455] SelectPalette (hdc=0x5010830, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0085.455] SelectObject (hdc=0xffffffff92010880, h=0x185000f) returned 0x29050250 [0085.455] DeleteDC (hdc=0xffffffff92010880) returned 1 [0085.455] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0085.455] EndPaint (hWnd=0x201da, lpPaint=0x14e448) returned 1 [0085.455] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0085.455] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0085.455] WaitMessage () returned 1 [0085.518] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0085.518] IsWindowUnicode (hWnd=0x201c8) returned 1 [0085.518] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0085.519] TranslateMessage (lpMsg=0x14edb0) returned 0 [0085.519] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0085.519] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0085.519] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0085.519] WaitMessage () returned 1 [0085.628] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0085.628] IsWindowUnicode (hWnd=0x201c8) returned 1 [0085.628] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0085.628] TranslateMessage (lpMsg=0x14edb0) returned 0 [0085.628] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0085.628] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0085.628] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0085.628] WaitMessage () returned 1 [0085.737] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0085.737] IsWindowUnicode (hWnd=0x201c8) returned 1 [0085.737] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0085.737] TranslateMessage (lpMsg=0x14edb0) returned 0 [0085.737] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0085.737] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0085.737] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0085.737] WaitMessage () returned 1 [0085.846] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0085.846] IsWindowUnicode (hWnd=0x201c8) returned 1 [0085.846] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0085.846] TranslateMessage (lpMsg=0x14edb0) returned 0 [0085.846] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0085.846] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0085.846] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0085.846] WaitMessage () returned 1 [0085.955] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0085.955] IsWindowUnicode (hWnd=0x201c8) returned 1 [0085.955] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0085.955] TranslateMessage (lpMsg=0x14edb0) returned 0 [0085.955] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0085.955] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0085.955] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0085.955] WaitMessage () returned 1 [0086.065] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.065] IsWindowUnicode (hWnd=0x201c8) returned 1 [0086.065] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.065] TranslateMessage (lpMsg=0x14edb0) returned 0 [0086.065] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0086.065] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0086.065] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0086.065] WaitMessage () returned 1 [0086.174] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.174] IsWindowUnicode (hWnd=0x201c8) returned 1 [0086.174] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.174] TranslateMessage (lpMsg=0x14edb0) returned 0 [0086.174] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0086.174] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0086.174] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0086.174] WaitMessage () returned 1 [0086.283] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.283] IsWindowUnicode (hWnd=0x201c8) returned 1 [0086.283] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.283] TranslateMessage (lpMsg=0x14edb0) returned 0 [0086.283] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0086.283] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0086.283] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0086.283] WaitMessage () returned 1 [0086.392] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.392] IsWindowUnicode (hWnd=0x201c8) returned 1 [0086.392] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.392] TranslateMessage (lpMsg=0x14edb0) returned 0 [0086.392] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0086.392] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0086.392] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0086.392] WaitMessage () returned 1 [0086.454] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.454] IsWindowUnicode (hWnd=0x301ee) returned 1 [0086.454] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.454] TranslateMessage (lpMsg=0x14edb0) returned 0 [0086.454] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0086.455] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0086.455] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0086.455] CoTaskMemFree (pv=0xa692f0) [0086.455] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0086.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0086.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0086.456] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0086.456] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0086.456] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e500) returned 1 [0086.456] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x274 [0086.456] GetFileType (hFile=0x274) returned 0x1 [0086.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e470) returned 1 [0086.456] GetFileType (hFile=0x274) returned 0x1 [0086.456] ReadFile (in: hFile=0x274, lpBuffer=0x2221670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x2221670*, lpNumberOfBytesRead=0x14e5d8*=0x2, lpOverlapped=0x0) returned 1 [0086.456] ReadFile (in: hFile=0x274, lpBuffer=0x2221670, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x2221670*, lpNumberOfBytesRead=0x14e5d8*=0x0, lpOverlapped=0x0) returned 1 [0086.456] CloseHandle (hObject=0x274) returned 1 [0086.458] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0086.458] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0086.458] CoTaskMemFree (pv=0xa692f0) [0086.458] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0086.458] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0086.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0086.458] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0086.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0086.458] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0086.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e4c0) returned 1 [0086.458] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x274 [0086.459] GetFileType (hFile=0x274) returned 0x1 [0086.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e430) returned 1 [0086.459] GetFileType (hFile=0x274) returned 0x1 [0086.459] WriteFile (in: hFile=0x274, lpBuffer=0x22249c0*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x14e508, lpOverlapped=0x0 | out: lpBuffer=0x22249c0*, lpNumberOfBytesWritten=0x14e508*=0x2, lpOverlapped=0x0) returned 1 [0086.460] CloseHandle (hObject=0x274) returned 1 [0086.461] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0086.461] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0086.461] GetSystemMetrics (nIndex=42) returned 0 [0086.461] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e600, nMaxCount=5 | out: lpString="4:43") returned 4 [0086.461] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e600) returned 0x4 [0086.461] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0086.461] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0086.461] GetSystemMetrics (nIndex=42) returned 0 [0086.461] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e5a0, nMaxCount=5 | out: lpString="4:43") returned 4 [0086.461] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e5a0) returned 0x4 [0086.461] SetWindowTextW (hWnd=0x201da, lpString="4:42") returned 1 [0086.461] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xc, wParam=0x0, lParam=0x22226e4) returned 0x1 [0086.462] GetStockObject (i=5) returned 0x1900015 [0086.462] GetDlgItem (hDlg=0x401fa, nIDDlgItem=131546) returned 0x201da [0086.462] SendMessageW (hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0086.462] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0086.462] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0086.462] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0086.462] GetSystemMetrics (nIndex=42) returned 0 [0086.462] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e460, nMaxCount=5 | out: lpString="4:42") returned 4 [0086.462] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e460) returned 0x4 [0086.462] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0086.462] AdjustWindowRectEx (in: lpRect=0x14e478, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e478) returned 1 [0086.462] DrawTextExW (in: hdc=0x8010893, lpchText="4:42", cchText=4, lprc=0x14e3e8, format=0x2400, lpdtp=0x2225c78 | out: lpchText="4:42", lprc=0x14e3e8) returned 20 [0086.462] InvalidateRect (hWnd=0x201da, lpRect=0x0, bErase=1) returned 1 [0086.463] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0086.463] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0086.463] GetSystemMetrics (nIndex=42) returned 0 [0086.463] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14e3d0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0086.463] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14e3d0) returned 0xc [0086.463] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.463] IsWindowUnicode (hWnd=0x201da) returned 1 [0086.463] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.463] TranslateMessage (lpMsg=0x14edb0) returned 0 [0086.463] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0086.463] BeginPaint (in: hWnd=0x201da, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0x5010830 [0086.463] SelectPalette (hdc=0x5010830, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0086.463] CreateCompatibleDC (hdc=0x5010830) returned 0xffffffff93010880 [0086.463] SelectObject (hdc=0xffffffff93010880, h=0x29050250) returned 0x185000f [0086.463] GdipCreateFromHDC (hdc=0xffffffff93010880, graphics=0x14e428) returned 0x0 [0086.463] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0086.463] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=40, height=20, combineMode=0x0) returned 0x0 [0086.463] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0086.463] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0086.464] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14e4b8) returned 0x0 [0086.464] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0086.464] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0086.464] LocalFree (hMem=0xa931f0) returned 0x0 [0086.464] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0086.464] GdipCreateRegion (region=0x14e450) returned 0x0 [0086.464] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0086.464] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0086.464] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0086.464] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0086.464] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0086.464] GetSystemMetrics (nIndex=42) returned 0 [0086.464] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:42") returned 4 [0086.464] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0086.464] GetClientRect (in: hWnd=0x201da, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0086.464] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0086.464] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0086.464] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0086.464] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0086.464] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0086.464] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0086.464] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0086.464] LocalFree (hMem=0xa931f0) returned 0x0 [0086.465] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0086.465] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0086.465] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0086.465] LocalFree (hMem=0xa931f0) returned 0x0 [0086.465] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0086.465] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0086.465] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0086.465] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0086.465] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0086.465] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0086.465] GetCurrentObject (hdc=0xffffffff93010880, type=0x1) returned 0x1b00017 [0086.465] GetCurrentObject (hdc=0xffffffff93010880, type=0x2) returned 0x1900010 [0086.465] GetCurrentObject (hdc=0xffffffff93010880, type=0x7) returned 0x29050250 [0086.465] GetCurrentObject (hdc=0xffffffff93010880, type=0x6) returned 0x18a002e [0086.465] SaveDC (hdc=0xffffffff93010880) returned 1 [0086.465] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffd3040872 [0086.465] GetClipRgn (hdc=0xffffffff93010880, hrgn=0xffffffffd3040872) returned 0 [0086.465] SelectClipRgn (hdc=0xffffffff93010880, hrgn=0xffffffffad04086f) returned 2 [0086.465] DeleteObject (ho=0xffffffffd3040872) returned 1 [0086.465] DeleteObject (ho=0xffffffffad04086f) returned 1 [0086.465] OffsetViewportOrgEx (in: hdc=0xffffffff93010880, x=0, y=0, lppt=0x2226378 | out: lppt=0x2226378) returned 1 [0086.466] GetNearestColor (hdc=0xffffffff93010880, color=0xa0) returned 0xa0 [0086.466] CreateSolidBrush (color=0xa0) returned 0xffffffff9e100860 [0086.466] FillRect (hDC=0xffffffff93010880, lprc=0x14e1e8, hbr=0xffffffff9e100860) returned 1 [0086.466] DeleteObject (ho=0xffffffff9e100860) returned 1 [0086.466] RestoreDC (hdc=0xffffffff93010880, nSavedDC=-1) returned 1 [0086.466] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff93010880) returned 0x0 [0086.466] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd3e0dbd) returned 0x0 [0086.466] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0086.466] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0086.466] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0086.466] GetSystemMetrics (nIndex=42) returned 0 [0086.466] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:42") returned 4 [0086.466] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0086.466] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0086.466] GetCurrentObject (hdc=0xffffffff93010880, type=0x1) returned 0x1b00017 [0086.466] GetCurrentObject (hdc=0xffffffff93010880, type=0x2) returned 0x1900010 [0086.466] GetCurrentObject (hdc=0xffffffff93010880, type=0x7) returned 0x29050250 [0086.466] GetCurrentObject (hdc=0xffffffff93010880, type=0x6) returned 0x18a002e [0086.466] SaveDC (hdc=0xffffffff93010880) returned 1 [0086.466] GetNearestColor (hdc=0xffffffff93010880, color=0xffffff) returned 0xffffff [0086.467] RestoreDC (hdc=0xffffffff93010880, nSavedDC=-1) returned 1 [0086.467] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff93010880) returned 0x0 [0086.467] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0086.467] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0086.467] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0086.467] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0086.467] GetCurrentObject (hdc=0xffffffff93010880, type=0x1) returned 0x1b00017 [0086.467] GetCurrentObject (hdc=0xffffffff93010880, type=0x2) returned 0x1900010 [0086.467] GetCurrentObject (hdc=0xffffffff93010880, type=0x7) returned 0x29050250 [0086.467] GetCurrentObject (hdc=0xffffffff93010880, type=0x6) returned 0x18a002e [0086.467] SaveDC (hdc=0xffffffff93010880) returned 1 [0086.467] GetTextAlign (hdc=0xffffffff93010880) returned 0x0 [0086.467] GetTextColor (hdc=0xffffffff93010880) returned 0x0 [0086.467] SetTextColor (hdc=0xffffffff93010880, color=0xffffff) returned 0x0 [0086.467] GetCurrentObject (hdc=0xffffffff93010880, type=0x6) returned 0x18a002e [0086.467] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0086.467] SelectObject (hdc=0xffffffff93010880, h=0x200a0899) returned 0x18a002e [0086.467] GetBkMode (hdc=0xffffffff93010880) returned 2 [0086.468] SetBkMode (hdc=0xffffffff93010880, mode=1) returned 2 [0086.468] DrawTextExW (in: hdc=0xffffffff93010880, lpchText="4:42", cchText=4, lprc=0x14e1c8, format=0x0, lpdtp=0x2226c08 | out: lpchText="4:42", lprc=0x14e1c8) returned 20 [0086.468] RestoreDC (hdc=0xffffffff93010880, nSavedDC=-1) returned 1 [0086.468] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff93010880) returned 0x0 [0086.468] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0086.468] BitBlt (hdc=0x5010830, x=0, y=0, cx=40, cy=20, hdcSrc=0xffffffff93010880, x1=0, y1=0, rop=0xcc0020) returned 1 [0086.468] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff93010880) returned 0x0 [0086.468] SelectPalette (hdc=0x5010830, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0086.468] SelectObject (hdc=0xffffffff93010880, h=0x185000f) returned 0x29050250 [0086.468] DeleteDC (hdc=0xffffffff93010880) returned 1 [0086.468] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0086.468] EndPaint (hWnd=0x201da, lpPaint=0x14e448) returned 1 [0086.468] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0086.468] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0086.468] WaitMessage () returned 1 [0086.501] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.501] IsWindowUnicode (hWnd=0x201c8) returned 1 [0086.501] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.501] TranslateMessage (lpMsg=0x14edb0) returned 0 [0086.501] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0086.502] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0086.502] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0086.502] WaitMessage () returned 1 [0086.610] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.611] IsWindowUnicode (hWnd=0x201c8) returned 1 [0086.611] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.611] TranslateMessage (lpMsg=0x14edb0) returned 0 [0086.611] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0086.611] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0086.611] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0086.611] WaitMessage () returned 1 [0086.627] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.627] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x27b031e) returned 0x1 [0086.627] IsWindowUnicode (hWnd=0x1020c) returned 1 [0086.627] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.627] TranslateMessage (lpMsg=0x14edb0) returned 0 [0086.627] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0086.627] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0086.627] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.627] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x27b031e) returned 0x1 [0086.628] IsWindowUnicode (hWnd=0x1020c) returned 1 [0086.628] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.628] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x27b031e) returned 0x1 [0086.628] SetCursor (hCursor=0x10003) returned 0x10003 [0086.628] TranslateMessage (lpMsg=0x14edb0) returned 0 [0086.628] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0086.628] _TrackMouseEvent (in: lpEventTrack=0x214a8d0 | out: lpEventTrack=0x214a8d0) returned 1 [0086.628] SendMessageW (hWnd=0x1020c, Msg=0xc12f, wParam=0x0, lParam=0x0) returned 0x0 [0086.628] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0xc12f, wParam=0x0, lParam=0x0) returned 0x0 [0086.628] InvalidateRect (hWnd=0x1020c, lpRect=0x0, bErase=0) returned 1 [0086.628] GetKeyState (nVirtKey=1) returned 1 [0086.628] GetKeyState (nVirtKey=2) returned 0 [0086.628] GetKeyState (nVirtKey=4) returned 0 [0086.628] GetKeyState (nVirtKey=5) returned 0 [0086.628] GetKeyState (nVirtKey=6) returned 0 [0086.628] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.628] IsWindowUnicode (hWnd=0x1020c) returned 1 [0086.628] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.628] TranslateMessage (lpMsg=0x14edb0) returned 0 [0086.628] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0086.628] BeginPaint (in: hWnd=0x1020c, lpPaint=0x14e478 | out: lpPaint=0x14e478) returned 0x5010825 [0086.628] SelectPalette (hdc=0x5010825, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0086.629] CreateCompatibleDC (hdc=0x5010825) returned 0xffffffff94010880 [0086.629] SelectObject (hdc=0xffffffff94010880, h=0x29050250) returned 0x185000f [0086.629] GdipCreateFromHDC (hdc=0xffffffff94010880, graphics=0x14e3f8) returned 0x0 [0086.629] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0086.629] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=408, height=23, combineMode=0x0) returned 0x0 [0086.629] GdipCreateMatrix (matrix=0x14e420) returned 0x0 [0086.629] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0086.629] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14e488) returned 0x0 [0086.629] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0086.629] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0086.629] LocalFree (hMem=0xa931f0) returned 0x0 [0086.629] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0086.629] GdipCreateRegion (region=0x14e420) returned 0x0 [0086.629] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0086.629] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e480) returned 0x0 [0086.629] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e520) returned 0x0 [0086.629] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd3c0dbd) returned 0x0 [0086.629] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0086.630] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e198) returned 0x0 [0086.630] GetCurrentObject (hdc=0xffffffff94010880, type=0x1) returned 0x1b00017 [0086.630] GetCurrentObject (hdc=0xffffffff94010880, type=0x2) returned 0x1900010 [0086.630] GetCurrentObject (hdc=0xffffffff94010880, type=0x7) returned 0x29050250 [0086.630] GetCurrentObject (hdc=0xffffffff94010880, type=0x6) returned 0x18a002e [0086.630] SaveDC (hdc=0xffffffff94010880) returned 1 [0086.630] GetNearestColor (hdc=0xffffffff94010880, color=0xa0) returned 0xa0 [0086.630] GetNearestColor (hdc=0xffffffff94010880, color=0x35) returned 0x35 [0086.630] GetNearestColor (hdc=0xffffffff94010880, color=0x0) returned 0x0 [0086.630] GetNearestColor (hdc=0xffffffff94010880, color=0x4848e5) returned 0x4848e5 [0086.630] GetNearestColor (hdc=0xffffffff94010880, color=0x0) returned 0x0 [0086.630] GetNearestColor (hdc=0xffffffff94010880, color=0x5151ff) returned 0x5151ff [0086.630] GetNearestColor (hdc=0xffffffff94010880, color=0x4848e5) returned 0x4848e5 [0086.630] GetNearestColor (hdc=0xffffffff94010880, color=0xc0) returned 0xc0 [0086.630] GetNearestColor (hdc=0xffffffff94010880, color=0x0) returned 0x0 [0086.630] RestoreDC (hdc=0xffffffff94010880, nSavedDC=-1) returned 1 [0086.630] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff94010880) returned 0x0 [0086.631] IsAppThemed () returned 0x1 [0086.631] GetThemeAppProperties () returned 0x3 [0086.631] GetThemeAppProperties () returned 0x3 [0086.631] IsAppThemed () returned 0x1 [0086.631] GetThemeAppProperties () returned 0x3 [0086.631] GetThemeAppProperties () returned 0x3 [0086.631] SelectObject (hdc=0x8010893, h=0x120a086d) returned 0x200a0899 [0086.631] DrawTextExW (in: hdc=0x8010893, lpchText="Check", cchText=5, lprc=0x14de08, format=0x2415, lpdtp=0x2227828 | out: lpchText="Check", lprc=0x14de08) returned 13 [0086.631] IsAppThemed () returned 0x1 [0086.631] GetThemeAppProperties () returned 0x3 [0086.631] GetThemeAppProperties () returned 0x3 [0086.631] IsAppThemed () returned 0x1 [0086.631] GetThemeAppProperties () returned 0x3 [0086.631] GetThemeAppProperties () returned 0x3 [0086.631] IsAppThemed () returned 0x1 [0086.631] GetThemeAppProperties () returned 0x3 [0086.631] GetThemeAppProperties () returned 0x3 [0086.631] IsAppThemed () returned 0x1 [0086.631] GetThemeAppProperties () returned 0x3 [0086.631] GetThemeAppProperties () returned 0x3 [0086.631] IsThemePartDefined () returned 0x1 [0086.631] IsAppThemed () returned 0x1 [0086.631] GetThemeAppProperties () returned 0x3 [0086.631] GetThemeAppProperties () returned 0x3 [0086.631] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0086.631] IsAppThemed () returned 0x1 [0086.631] GetThemeAppProperties () returned 0x3 [0086.631] GetThemeAppProperties () returned 0x3 [0086.631] IsAppThemed () returned 0x1 [0086.632] GetThemeAppProperties () returned 0x3 [0086.632] GetThemeAppProperties () returned 0x3 [0086.632] IsThemePartDefined () returned 0x1 [0086.632] GdipCreateRegion (region=0x14df00) returned 0x0 [0086.632] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0086.632] GdipCreateMatrix (matrix=0x14df00) returned 0x0 [0086.632] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0086.632] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14df68) returned 0x0 [0086.632] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0086.632] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0086.632] LocalFree (hMem=0xa931f0) returned 0x0 [0086.632] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0086.632] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0086.632] LocalFree (hMem=0xa931f0) returned 0x0 [0086.632] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0086.632] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14dfd0) returned 0x0 [0086.632] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df90) returned 0x0 [0086.632] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df90) returned 0x0 [0086.632] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0086.632] GdipGetDC (graphics=0x1afd81d0, hdc=0x14dfd8) returned 0x0 [0086.632] GetCurrentObject (hdc=0xffffffff94010880, type=0x1) returned 0x1b00017 [0086.632] GetCurrentObject (hdc=0xffffffff94010880, type=0x2) returned 0x1900010 [0086.633] GetCurrentObject (hdc=0xffffffff94010880, type=0x7) returned 0x29050250 [0086.633] GetCurrentObject (hdc=0xffffffff94010880, type=0x6) returned 0x18a002e [0086.633] SaveDC (hdc=0xffffffff94010880) returned 1 [0086.633] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffae04086f [0086.633] GetClipRgn (hdc=0xffffffff94010880, hrgn=0xffffffffae04086f) returned 0 [0086.633] SelectClipRgn (hdc=0xffffffff94010880, hrgn=0xffffffffd6040872) returned 2 [0086.633] DeleteObject (ho=0xffffffffae04086f) returned 1 [0086.633] DeleteObject (ho=0xffffffffd6040872) returned 1 [0086.633] OffsetViewportOrgEx (in: hdc=0xffffffff94010880, x=0, y=0, lppt=0x2228210 | out: lppt=0x2228210) returned 1 [0086.633] DrawThemeParentBackground () returned 0x0 [0086.633] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14db88 | out: lpwndpl=0x14db88) returned 1 [0086.633] GetClientRect (in: hWnd=0x401fa, lpRect=0x14daa0 | out: lpRect=0x14daa0) returned 1 [0086.633] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0086.633] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0086.633] GetSystemMetrics (nIndex=42) returned 0 [0086.633] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d800, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0086.633] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d800) returned 0xc [0086.633] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d888 | out: lpRect=0x14d888) returned 1 [0086.633] GetCurrentObject (hdc=0xffffffff94010880, type=0x1) returned 0x1b00017 [0086.633] GetCurrentObject (hdc=0xffffffff94010880, type=0x2) returned 0x1900010 [0086.634] GetCurrentObject (hdc=0xffffffff94010880, type=0x7) returned 0x29050250 [0086.634] GetCurrentObject (hdc=0xffffffff94010880, type=0x6) returned 0x18a002e [0086.634] SaveDC (hdc=0xffffffff94010880) returned 2 [0086.634] GetNearestColor (hdc=0xffffffff94010880, color=0xa0) returned 0xa0 [0086.634] CreateSolidBrush (color=0xa0) returned 0xffffffff9f100860 [0086.634] FillRect (hDC=0xffffffff94010880, lprc=0x14d578, hbr=0xffffffff9f100860) returned 1 [0086.634] DeleteObject (ho=0xffffffff9f100860) returned 1 [0086.634] RestoreDC (hdc=0xffffffff94010880, nSavedDC=-1) returned 1 [0086.634] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0086.634] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0086.634] GetSystemMetrics (nIndex=42) returned 0 [0086.634] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0086.634] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0086.634] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d7b8 | out: lpRect=0x14d7b8) returned 1 [0086.634] GetCurrentObject (hdc=0xffffffff94010880, type=0x1) returned 0x1b00017 [0086.634] GetCurrentObject (hdc=0xffffffff94010880, type=0x2) returned 0x1900010 [0086.634] GetCurrentObject (hdc=0xffffffff94010880, type=0x7) returned 0x29050250 [0086.634] GetCurrentObject (hdc=0xffffffff94010880, type=0x6) returned 0x18a002e [0086.634] SaveDC (hdc=0xffffffff94010880) returned 2 [0086.635] GetNearestColor (hdc=0xffffffff94010880, color=0xa0) returned 0xa0 [0086.635] CreateSolidBrush (color=0xa0) returned 0xffffffffa0100860 [0086.635] FillRect (hDC=0xffffffff94010880, lprc=0x14d4a8, hbr=0xffffffffa0100860) returned 1 [0086.635] DeleteObject (ho=0xffffffffa0100860) returned 1 [0086.635] RestoreDC (hdc=0xffffffff94010880, nSavedDC=-1) returned 1 [0086.635] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0086.635] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0086.635] GetSystemMetrics (nIndex=42) returned 0 [0086.635] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0086.635] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0086.635] RestoreDC (hdc=0xffffffff94010880, nSavedDC=-1) returned 1 [0086.635] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff94010880) returned 0x0 [0086.635] IsAppThemed () returned 0x1 [0086.635] GetThemeAppProperties () returned 0x3 [0086.635] GetThemeAppProperties () returned 0x3 [0086.635] IsAppThemed () returned 0x1 [0086.635] GetThemeAppProperties () returned 0x3 [0086.635] GetThemeAppProperties () returned 0x3 [0086.635] IsThemePartDefined () returned 0x1 [0086.635] GdipCreateRegion (region=0x14dea0) returned 0x0 [0086.635] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0086.636] GdipCreateMatrix (matrix=0x14dea0) returned 0x0 [0086.636] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0086.636] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14df08) returned 0x0 [0086.636] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0086.636] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0086.636] LocalFree (hMem=0xa931f0) returned 0x0 [0086.636] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0086.636] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0086.636] LocalFree (hMem=0xa931f0) returned 0x0 [0086.636] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0086.636] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df70) returned 0x0 [0086.636] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df30) returned 0x0 [0086.636] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df30) returned 0x0 [0086.636] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0086.636] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df78) returned 0x0 [0086.636] GetCurrentObject (hdc=0xffffffff94010880, type=0x1) returned 0x1b00017 [0086.636] GetCurrentObject (hdc=0xffffffff94010880, type=0x2) returned 0x1900010 [0086.636] GetCurrentObject (hdc=0xffffffff94010880, type=0x7) returned 0x29050250 [0086.636] GetCurrentObject (hdc=0xffffffff94010880, type=0x6) returned 0x18a002e [0086.636] SaveDC (hdc=0xffffffff94010880) returned 1 [0086.637] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffd7040872 [0086.637] GetClipRgn (hdc=0xffffffff94010880, hrgn=0xffffffffd7040872) returned 0 [0086.637] SelectClipRgn (hdc=0xffffffff94010880, hrgn=0xffffffffb004086f) returned 2 [0086.637] DeleteObject (ho=0xffffffffd7040872) returned 1 [0086.637] DeleteObject (ho=0xffffffffb004086f) returned 1 [0086.637] OffsetViewportOrgEx (in: hdc=0xffffffff94010880, x=0, y=0, lppt=0x2229018 | out: lppt=0x2229018) returned 1 [0086.637] IsAppThemed () returned 0x1 [0086.637] GetThemeAppProperties () returned 0x3 [0086.637] GetThemeAppProperties () returned 0x3 [0086.637] DrawThemeBackground () returned 0x0 [0086.637] RestoreDC (hdc=0xffffffff94010880, nSavedDC=-1) returned 1 [0086.637] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff94010880) returned 0x0 [0086.637] GdipCreateRegion (region=0x14de90) returned 0x0 [0086.637] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0086.637] GdipCreateMatrix (matrix=0x14de90) returned 0x0 [0086.637] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0086.637] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14def8) returned 0x0 [0086.637] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0086.638] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0086.638] LocalFree (hMem=0xa931f0) returned 0x0 [0086.638] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0086.638] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0086.638] LocalFree (hMem=0xa931f0) returned 0x0 [0086.638] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0086.638] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df60) returned 0x0 [0086.638] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df20) returned 0x0 [0086.638] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df20) returned 0x0 [0086.638] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0086.638] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df68) returned 0x0 [0086.638] GetCurrentObject (hdc=0xffffffff94010880, type=0x1) returned 0x1b00017 [0086.638] GetCurrentObject (hdc=0xffffffff94010880, type=0x2) returned 0x1900010 [0086.638] GetCurrentObject (hdc=0xffffffff94010880, type=0x7) returned 0x29050250 [0086.638] GetCurrentObject (hdc=0xffffffff94010880, type=0x6) returned 0x18a002e [0086.638] SaveDC (hdc=0xffffffff94010880) returned 1 [0086.638] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffb104086f [0086.638] GetClipRgn (hdc=0xffffffff94010880, hrgn=0xffffffffb104086f) returned 0 [0086.638] SelectClipRgn (hdc=0xffffffff94010880, hrgn=0xffffffffd8040872) returned 2 [0086.639] DeleteObject (ho=0xffffffffb104086f) returned 1 [0086.639] DeleteObject (ho=0xffffffffd8040872) returned 1 [0086.639] OffsetViewportOrgEx (in: hdc=0xffffffff94010880, x=0, y=0, lppt=0x22294f0 | out: lppt=0x22294f0) returned 1 [0086.639] IsAppThemed () returned 0x1 [0086.639] GetThemeAppProperties () returned 0x3 [0086.639] GetThemeAppProperties () returned 0x3 [0086.639] GetThemeBackgroundContentRect () returned 0x0 [0086.639] RestoreDC (hdc=0xffffffff94010880, nSavedDC=-1) returned 1 [0086.639] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff94010880) returned 0x0 [0086.639] IsAppThemed () returned 0x1 [0086.639] GetThemeAppProperties () returned 0x3 [0086.639] GetThemeAppProperties () returned 0x3 [0086.639] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e148) returned 0x0 [0086.639] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e128) returned 0x0 [0086.639] GetCurrentObject (hdc=0xffffffff94010880, type=0x1) returned 0x1b00017 [0086.639] GetCurrentObject (hdc=0xffffffff94010880, type=0x2) returned 0x1900010 [0086.639] GetCurrentObject (hdc=0xffffffff94010880, type=0x7) returned 0x29050250 [0086.639] GetCurrentObject (hdc=0xffffffff94010880, type=0x6) returned 0x18a002e [0086.639] SaveDC (hdc=0xffffffff94010880) returned 1 [0086.639] GetTextAlign (hdc=0xffffffff94010880) returned 0x0 [0086.639] GetTextColor (hdc=0xffffffff94010880) returned 0x0 [0086.639] GetCurrentObject (hdc=0xffffffff94010880, type=0x6) returned 0x18a002e [0086.640] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dc60 | out: pv=0x14dc60) returned 92 [0086.640] SelectObject (hdc=0xffffffff94010880, h=0x120a086d) returned 0x18a002e [0086.640] GetBkMode (hdc=0xffffffff94010880) returned 2 [0086.640] SetBkMode (hdc=0xffffffff94010880, mode=1) returned 2 [0086.640] DrawTextExW (in: hdc=0xffffffff94010880, lpchText="Check", cchText=5, lprc=0x14dea0, format=0x2415, lpdtp=0x2229ad0 | out: lpchText="Check", lprc=0x14dea0) returned 13 [0086.640] DrawTextExW (in: hdc=0xffffffff94010880, lpchText="Check", cchText=5, lprc=0x14e0b8, format=0x2015, lpdtp=0x2229ad0 | out: lpchText="Check", lprc=0x14e0b8) returned 13 [0086.640] RestoreDC (hdc=0xffffffff94010880, nSavedDC=-1) returned 1 [0086.640] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff94010880) returned 0x0 [0086.640] GetFocus () returned 0x1020c [0086.640] IsAppThemed () returned 0x1 [0086.640] GetThemeAppProperties () returned 0x3 [0086.640] GetThemeAppProperties () returned 0x3 [0086.640] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e438) returned 0x0 [0086.640] BitBlt (hdc=0x5010825, x=0, y=0, cx=408, cy=23, hdcSrc=0xffffffff94010880, x1=0, y1=0, rop=0xcc0020) returned 1 [0086.640] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff94010880) returned 0x0 [0086.640] SelectPalette (hdc=0x5010825, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0086.640] SelectObject (hdc=0xffffffff94010880, h=0x185000f) returned 0x29050250 [0086.641] DeleteDC (hdc=0xffffffff94010880) returned 1 [0086.641] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0086.641] EndPaint (hWnd=0x1020c, lpPaint=0x14e418) returned 1 [0086.641] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0086.641] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0086.641] WaitMessage () returned 1 [0086.720] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.720] IsWindowUnicode (hWnd=0x201c8) returned 1 [0086.720] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.720] TranslateMessage (lpMsg=0x14edb0) returned 0 [0086.720] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0086.720] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0086.720] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0086.720] WaitMessage () returned 1 [0086.735] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.735] IsWindowUnicode (hWnd=0x1020c) returned 1 [0086.735] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.735] TranslateMessage (lpMsg=0x14edb0) returned 0 [0086.735] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0086.735] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.735] IsWindowUnicode (hWnd=0x1020c) returned 1 [0086.735] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.735] TranslateMessage (lpMsg=0x14edb0) returned 0 [0086.735] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0086.735] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x2a1, wParam=0x0, lParam=0x400d3) returned 0x0 [0086.735] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0086.735] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0086.735] WaitMessage () returned 1 [0086.829] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.829] IsWindowUnicode (hWnd=0x201c8) returned 1 [0086.829] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.829] TranslateMessage (lpMsg=0x14edb0) returned 0 [0086.829] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0086.829] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0086.829] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0086.829] WaitMessage () returned 1 [0086.858] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.858] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x27b031e) returned 0x1 [0086.858] IsWindowUnicode (hWnd=0x1020c) returned 1 [0086.858] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.858] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x27b031e) returned 0x1 [0086.858] GetDlgItem (hDlg=0x401fa, nIDDlgItem=0) returned 0x0 [0086.858] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x210, wParam=0x201, lParam=0x1ae0177) returned 0x0 [0086.858] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x21, wParam=0x401fa, lParam=0x2010001) returned 0x1 [0086.859] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x21, wParam=0x401fa, lParam=0x2010001) returned 0x1 [0086.859] SetCursor (hCursor=0x10003) returned 0x10003 [0086.859] TranslateMessage (lpMsg=0x14edb0) returned 0 [0086.859] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0086.859] GetKeyState (nVirtKey=1) returned -128 [0086.859] GetKeyState (nVirtKey=2) returned 0 [0086.859] GetKeyState (nVirtKey=4) returned 0 [0086.859] GetKeyState (nVirtKey=5) returned 0 [0086.859] GetKeyState (nVirtKey=6) returned 0 [0086.859] IsWindowVisible (hWnd=0x1020c) returned 1 [0086.859] IsWindowEnabled (hWnd=0x1020c) returned 1 [0086.859] SetFocus (hWnd=0x1020c) returned 0x1020c [0086.859] GetFocus () returned 0x1020c [0086.859] GetFocus () returned 0x1020c [0086.859] GetFocus () returned 0x1020c [0086.859] GetKeyState (nVirtKey=1) returned -128 [0086.859] GetKeyState (nVirtKey=2) returned 0 [0086.860] GetKeyState (nVirtKey=4) returned 0 [0086.860] GetKeyState (nVirtKey=5) returned 0 [0086.860] GetKeyState (nVirtKey=6) returned 0 [0086.860] GetCapture () returned 0x0 [0086.860] SetCapture (hWnd=0x1020c) returned 0x0 [0086.860] GetKeyState (nVirtKey=1) returned -128 [0086.860] GetKeyState (nVirtKey=2) returned 0 [0086.860] GetKeyState (nVirtKey=4) returned 0 [0086.860] GetKeyState (nVirtKey=5) returned 0 [0086.860] GetKeyState (nVirtKey=6) returned 0 [0086.860] NotifyWinEvent (event=0x800a, hwnd=0x1020c, idObject=-4, idChild=0) [0086.860] InvalidateRect (hWnd=0x1020c, lpRect=0x14e6f0, bErase=0) returned 1 [0086.860] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.860] GetMessageA (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.860] TranslateMessage (lpMsg=0x14edb0) returned 0 [0086.860] DispatchMessageA (lpMsg=0x14edb0) returned 0x0 [0086.860] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.860] IsWindowUnicode (hWnd=0x1020c) returned 1 [0086.860] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.860] TranslateMessage (lpMsg=0x14edb0) returned 0 [0086.860] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0086.860] MapWindowPoints (in: hWndFrom=0x1020c, hWndTo=0x0, lpPoints=0x2229d78, cPoints=0x1 | out: lpPoints=0x2229d78) returned 41353803 [0086.860] NotifyWinEvent (event=0x800a, hwnd=0x1020c, idObject=-4, idChild=0) [0086.860] InvalidateRect (hWnd=0x1020c, lpRect=0x14e680, bErase=0) returned 1 [0086.860] UpdateWindow (hWnd=0x1020c) returned 1 [0086.860] BeginPaint (in: hWnd=0x1020c, lpPaint=0x14ddf8 | out: lpPaint=0x14ddf8) returned 0x5010825 [0086.860] SelectPalette (hdc=0x5010825, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0086.860] CreateCompatibleDC (hdc=0x5010825) returned 0xffffffff95010880 [0086.861] SelectObject (hdc=0xffffffff95010880, h=0x29050250) returned 0x185000f [0086.861] GdipCreateFromHDC (hdc=0xffffffff95010880, graphics=0x14dd78) returned 0x0 [0086.861] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0086.861] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=408, height=23, combineMode=0x0) returned 0x0 [0086.861] GdipCreateMatrix (matrix=0x14dda0) returned 0x0 [0086.861] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0086.861] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14de08) returned 0x0 [0086.861] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0086.861] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0086.861] LocalFree (hMem=0xa931f0) returned 0x0 [0086.861] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0086.861] GdipCreateRegion (region=0x14dda0) returned 0x0 [0086.861] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0086.861] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14de00) returned 0x0 [0086.861] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14dea0) returned 0x0 [0086.861] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd3a0dbd) returned 0x0 [0086.861] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0086.861] GdipGetDC (graphics=0x1afd81d0, hdc=0x14db18) returned 0x0 [0086.861] GetCurrentObject (hdc=0xffffffff95010880, type=0x1) returned 0x1b00017 [0086.862] GetCurrentObject (hdc=0xffffffff95010880, type=0x2) returned 0x1900010 [0086.862] GetCurrentObject (hdc=0xffffffff95010880, type=0x7) returned 0x29050250 [0086.862] GetCurrentObject (hdc=0xffffffff95010880, type=0x6) returned 0x18a002e [0086.862] SaveDC (hdc=0xffffffff95010880) returned 1 [0086.862] GetNearestColor (hdc=0xffffffff95010880, color=0xa0) returned 0xa0 [0086.862] GetNearestColor (hdc=0xffffffff95010880, color=0x35) returned 0x35 [0086.862] GetNearestColor (hdc=0xffffffff95010880, color=0x0) returned 0x0 [0086.862] GetNearestColor (hdc=0xffffffff95010880, color=0x4848e5) returned 0x4848e5 [0086.862] GetNearestColor (hdc=0xffffffff95010880, color=0x0) returned 0x0 [0086.862] GetNearestColor (hdc=0xffffffff95010880, color=0x5151ff) returned 0x5151ff [0086.862] GetNearestColor (hdc=0xffffffff95010880, color=0x4848e5) returned 0x4848e5 [0086.862] GetNearestColor (hdc=0xffffffff95010880, color=0xc0) returned 0xc0 [0086.862] GetNearestColor (hdc=0xffffffff95010880, color=0x0) returned 0x0 [0086.862] RestoreDC (hdc=0xffffffff95010880, nSavedDC=-1) returned 1 [0086.862] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff95010880) returned 0x0 [0086.862] IsAppThemed () returned 0x1 [0086.862] GetThemeAppProperties () returned 0x3 [0086.863] GetThemeAppProperties () returned 0x3 [0086.863] IsAppThemed () returned 0x1 [0086.863] GetThemeAppProperties () returned 0x3 [0086.863] GetThemeAppProperties () returned 0x3 [0086.863] DrawTextExW (in: hdc=0x8010893, lpchText="Check", cchText=5, lprc=0x14d788, format=0x2415, lpdtp=0x222a8a0 | out: lpchText="Check", lprc=0x14d788) returned 13 [0086.863] IsAppThemed () returned 0x1 [0086.863] GetThemeAppProperties () returned 0x3 [0086.863] GetThemeAppProperties () returned 0x3 [0086.863] IsAppThemed () returned 0x1 [0086.863] GetThemeAppProperties () returned 0x3 [0086.863] GetThemeAppProperties () returned 0x3 [0086.863] IsAppThemed () returned 0x1 [0086.863] GetThemeAppProperties () returned 0x3 [0086.863] GetThemeAppProperties () returned 0x3 [0086.863] IsAppThemed () returned 0x1 [0086.863] GetThemeAppProperties () returned 0x3 [0086.863] GetThemeAppProperties () returned 0x3 [0086.863] IsThemePartDefined () returned 0x1 [0086.863] IsAppThemed () returned 0x1 [0086.863] GetThemeAppProperties () returned 0x3 [0086.863] GetThemeAppProperties () returned 0x3 [0086.863] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0086.863] IsAppThemed () returned 0x1 [0086.863] GetThemeAppProperties () returned 0x3 [0086.863] GetThemeAppProperties () returned 0x3 [0086.863] IsAppThemed () returned 0x1 [0086.863] GetThemeAppProperties () returned 0x3 [0086.863] GetThemeAppProperties () returned 0x3 [0086.863] IsThemePartDefined () returned 0x1 [0086.863] GdipCreateRegion (region=0x14d880) returned 0x0 [0086.863] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0086.864] GdipCreateMatrix (matrix=0x14d880) returned 0x0 [0086.864] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0086.864] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14d8e8) returned 0x0 [0086.864] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0086.864] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0086.864] LocalFree (hMem=0xa931f0) returned 0x0 [0086.864] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0086.864] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0086.864] LocalFree (hMem=0xa931f0) returned 0x0 [0086.864] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0086.864] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d950) returned 0x0 [0086.864] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d910) returned 0x0 [0086.864] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14d910) returned 0x0 [0086.864] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0086.864] GdipGetDC (graphics=0x1afd81d0, hdc=0x14d958) returned 0x0 [0086.864] GetCurrentObject (hdc=0xffffffff95010880, type=0x1) returned 0x1b00017 [0086.864] GetCurrentObject (hdc=0xffffffff95010880, type=0x2) returned 0x1900010 [0086.864] GetCurrentObject (hdc=0xffffffff95010880, type=0x7) returned 0x29050250 [0086.864] GetCurrentObject (hdc=0xffffffff95010880, type=0x6) returned 0x18a002e [0086.864] SaveDC (hdc=0xffffffff95010880) returned 1 [0086.864] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffd9040872 [0086.865] GetClipRgn (hdc=0xffffffff95010880, hrgn=0xffffffffd9040872) returned 0 [0086.865] SelectClipRgn (hdc=0xffffffff95010880, hrgn=0xffffffffb504086f) returned 2 [0086.865] DeleteObject (ho=0xffffffffd9040872) returned 1 [0086.865] DeleteObject (ho=0xffffffffb504086f) returned 1 [0086.865] OffsetViewportOrgEx (in: hdc=0xffffffff95010880, x=0, y=0, lppt=0x222b288 | out: lppt=0x222b288) returned 1 [0086.865] DrawThemeParentBackground () returned 0x0 [0086.865] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14d508 | out: lpwndpl=0x14d508) returned 1 [0086.865] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d420 | out: lpRect=0x14d420) returned 1 [0086.865] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0086.865] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0086.865] GetSystemMetrics (nIndex=42) returned 0 [0086.865] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d180, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0086.865] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d180) returned 0xc [0086.865] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d208 | out: lpRect=0x14d208) returned 1 [0086.865] GetCurrentObject (hdc=0xffffffff95010880, type=0x1) returned 0x1b00017 [0086.865] GetCurrentObject (hdc=0xffffffff95010880, type=0x2) returned 0x1900010 [0086.865] GetCurrentObject (hdc=0xffffffff95010880, type=0x7) returned 0x29050250 [0086.865] GetCurrentObject (hdc=0xffffffff95010880, type=0x6) returned 0x18a002e [0086.865] SaveDC (hdc=0xffffffff95010880) returned 2 [0086.865] GetNearestColor (hdc=0xffffffff95010880, color=0xa0) returned 0xa0 [0086.865] CreateSolidBrush (color=0xa0) returned 0xffffffffa1100860 [0086.866] FillRect (hDC=0xffffffff95010880, lprc=0x14cef8, hbr=0xffffffffa1100860) returned 1 [0086.866] DeleteObject (ho=0xffffffffa1100860) returned 1 [0086.866] RestoreDC (hdc=0xffffffff95010880, nSavedDC=-1) returned 1 [0086.866] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0086.866] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0086.866] GetSystemMetrics (nIndex=42) returned 0 [0086.866] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d0b0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0086.866] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d0b0) returned 0xc [0086.866] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d138 | out: lpRect=0x14d138) returned 1 [0086.866] GetCurrentObject (hdc=0xffffffff95010880, type=0x1) returned 0x1b00017 [0086.866] GetCurrentObject (hdc=0xffffffff95010880, type=0x2) returned 0x1900010 [0086.866] GetCurrentObject (hdc=0xffffffff95010880, type=0x7) returned 0x29050250 [0086.866] GetCurrentObject (hdc=0xffffffff95010880, type=0x6) returned 0x18a002e [0086.866] SaveDC (hdc=0xffffffff95010880) returned 2 [0086.866] GetNearestColor (hdc=0xffffffff95010880, color=0xa0) returned 0xa0 [0086.866] CreateSolidBrush (color=0xa0) returned 0xffffffffa2100860 [0086.866] FillRect (hDC=0xffffffff95010880, lprc=0x14ce28, hbr=0xffffffffa2100860) returned 1 [0086.866] DeleteObject (ho=0xffffffffa2100860) returned 1 [0086.866] RestoreDC (hdc=0xffffffff95010880, nSavedDC=-1) returned 1 [0086.867] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0086.867] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0086.867] GetSystemMetrics (nIndex=42) returned 0 [0086.867] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d0b0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0086.867] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d0b0) returned 0xc [0086.867] RestoreDC (hdc=0xffffffff95010880, nSavedDC=-1) returned 1 [0086.867] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff95010880) returned 0x0 [0086.867] IsAppThemed () returned 0x1 [0086.867] GetThemeAppProperties () returned 0x3 [0086.867] GetThemeAppProperties () returned 0x3 [0086.867] IsAppThemed () returned 0x1 [0086.867] GetThemeAppProperties () returned 0x3 [0086.867] GetThemeAppProperties () returned 0x3 [0086.867] IsThemePartDefined () returned 0x1 [0086.867] GdipCreateRegion (region=0x14d820) returned 0x0 [0086.867] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0086.867] GdipCreateMatrix (matrix=0x14d820) returned 0x0 [0086.867] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0086.867] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14d888) returned 0x0 [0086.867] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0086.867] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0086.867] LocalFree (hMem=0xa931f0) returned 0x0 [0086.867] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0086.867] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0086.868] LocalFree (hMem=0xa931f0) returned 0x0 [0086.868] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0086.868] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d8f0) returned 0x0 [0086.868] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d8b0) returned 0x0 [0086.868] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14d8b0) returned 0x0 [0086.868] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0086.868] GdipGetDC (graphics=0x1afd81d0, hdc=0x14d8f8) returned 0x0 [0086.868] GetCurrentObject (hdc=0xffffffff95010880, type=0x1) returned 0x1b00017 [0086.868] GetCurrentObject (hdc=0xffffffff95010880, type=0x2) returned 0x1900010 [0086.868] GetCurrentObject (hdc=0xffffffff95010880, type=0x7) returned 0x29050250 [0086.868] GetCurrentObject (hdc=0xffffffff95010880, type=0x6) returned 0x18a002e [0086.868] SaveDC (hdc=0xffffffff95010880) returned 1 [0086.868] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffb604086f [0086.868] GetClipRgn (hdc=0xffffffff95010880, hrgn=0xffffffffb604086f) returned 0 [0086.868] SelectClipRgn (hdc=0xffffffff95010880, hrgn=0xffffffffdb040872) returned 2 [0086.868] DeleteObject (ho=0xffffffffb604086f) returned 1 [0086.868] DeleteObject (ho=0xffffffffdb040872) returned 1 [0086.868] OffsetViewportOrgEx (in: hdc=0xffffffff95010880, x=0, y=0, lppt=0x222c090 | out: lppt=0x222c090) returned 1 [0086.868] IsAppThemed () returned 0x1 [0086.868] GetThemeAppProperties () returned 0x3 [0086.868] GetThemeAppProperties () returned 0x3 [0086.868] DrawThemeBackground () returned 0x0 [0086.869] RestoreDC (hdc=0xffffffff95010880, nSavedDC=-1) returned 1 [0086.869] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff95010880) returned 0x0 [0086.869] GdipCreateRegion (region=0x14d810) returned 0x0 [0086.869] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0086.869] GdipCreateMatrix (matrix=0x14d810) returned 0x0 [0086.869] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0086.869] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14d878) returned 0x0 [0086.869] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0086.869] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0086.869] LocalFree (hMem=0xa931f0) returned 0x0 [0086.869] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0086.869] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0086.869] LocalFree (hMem=0xa931f0) returned 0x0 [0086.869] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0086.869] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d8e0) returned 0x0 [0086.869] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d8a0) returned 0x0 [0086.869] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14d8a0) returned 0x0 [0086.869] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0086.869] GdipGetDC (graphics=0x1afd81d0, hdc=0x14d8e8) returned 0x0 [0086.869] GetCurrentObject (hdc=0xffffffff95010880, type=0x1) returned 0x1b00017 [0086.869] GetCurrentObject (hdc=0xffffffff95010880, type=0x2) returned 0x1900010 [0086.870] GetCurrentObject (hdc=0xffffffff95010880, type=0x7) returned 0x29050250 [0086.870] GetCurrentObject (hdc=0xffffffff95010880, type=0x6) returned 0x18a002e [0086.870] SaveDC (hdc=0xffffffff95010880) returned 1 [0086.870] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffdc040872 [0086.870] GetClipRgn (hdc=0xffffffff95010880, hrgn=0xffffffffdc040872) returned 0 [0086.870] SelectClipRgn (hdc=0xffffffff95010880, hrgn=0xffffffffb704086f) returned 2 [0086.870] DeleteObject (ho=0xffffffffdc040872) returned 1 [0086.870] DeleteObject (ho=0xffffffffb704086f) returned 1 [0086.870] OffsetViewportOrgEx (in: hdc=0xffffffff95010880, x=0, y=0, lppt=0x222c568 | out: lppt=0x222c568) returned 1 [0086.870] IsAppThemed () returned 0x1 [0086.870] GetThemeAppProperties () returned 0x3 [0086.870] GetThemeAppProperties () returned 0x3 [0086.870] GetThemeBackgroundContentRect () returned 0x0 [0086.870] RestoreDC (hdc=0xffffffff95010880, nSavedDC=-1) returned 1 [0086.870] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff95010880) returned 0x0 [0086.870] IsAppThemed () returned 0x1 [0086.870] GetThemeAppProperties () returned 0x3 [0086.870] GetThemeAppProperties () returned 0x3 [0086.870] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14dac8) returned 0x0 [0086.870] GdipGetDC (graphics=0x1afd81d0, hdc=0x14daa8) returned 0x0 [0086.870] GetCurrentObject (hdc=0xffffffff95010880, type=0x1) returned 0x1b00017 [0086.870] GetCurrentObject (hdc=0xffffffff95010880, type=0x2) returned 0x1900010 [0086.870] GetCurrentObject (hdc=0xffffffff95010880, type=0x7) returned 0x29050250 [0086.871] GetCurrentObject (hdc=0xffffffff95010880, type=0x6) returned 0x18a002e [0086.871] SaveDC (hdc=0xffffffff95010880) returned 1 [0086.871] GetTextAlign (hdc=0xffffffff95010880) returned 0x0 [0086.871] GetTextColor (hdc=0xffffffff95010880) returned 0x0 [0086.871] GetCurrentObject (hdc=0xffffffff95010880, type=0x6) returned 0x18a002e [0086.871] GetObjectW (in: h=0x18a002e, c=92, pv=0x14d5e0 | out: pv=0x14d5e0) returned 92 [0086.871] SelectObject (hdc=0xffffffff95010880, h=0x120a086d) returned 0x18a002e [0086.871] GetBkMode (hdc=0xffffffff95010880) returned 2 [0086.871] SetBkMode (hdc=0xffffffff95010880, mode=1) returned 2 [0086.871] DrawTextExW (in: hdc=0xffffffff95010880, lpchText="Check", cchText=5, lprc=0x14d820, format=0x2415, lpdtp=0x222cb48 | out: lpchText="Check", lprc=0x14d820) returned 13 [0086.871] DrawTextExW (in: hdc=0xffffffff95010880, lpchText="Check", cchText=5, lprc=0x14da38, format=0x2015, lpdtp=0x222cb48 | out: lpchText="Check", lprc=0x14da38) returned 13 [0086.871] RestoreDC (hdc=0xffffffff95010880, nSavedDC=-1) returned 1 [0086.871] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff95010880) returned 0x0 [0086.871] GetFocus () returned 0x1020c [0086.871] IsAppThemed () returned 0x1 [0086.871] GetThemeAppProperties () returned 0x3 [0086.872] GetThemeAppProperties () returned 0x3 [0086.872] GdipGetDC (graphics=0x1afd81d0, hdc=0x14ddb8) returned 0x0 [0086.872] BitBlt (hdc=0x5010825, x=0, y=0, cx=408, cy=23, hdcSrc=0xffffffff95010880, x1=0, y1=0, rop=0xcc0020) returned 1 [0086.872] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff95010880) returned 0x0 [0086.872] SelectPalette (hdc=0x5010825, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0086.872] SelectObject (hdc=0xffffffff95010880, h=0x185000f) returned 0x29050250 [0086.872] DeleteDC (hdc=0xffffffff95010880) returned 1 [0086.872] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0086.872] EndPaint (hWnd=0x1020c, lpPaint=0x14dd98) returned 1 [0086.872] MapWindowPoints (in: hWndFrom=0x1020c, hWndTo=0x0, lpPoints=0x222ccb0, cPoints=0x1 | out: lpPoints=0x222ccb0) returned 41353803 [0086.872] WindowFromPoint (Point=0x27b0000031e) returned 0x1020c [0086.872] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x27b031e) returned 0x1 [0086.872] NotifyWinEvent (event=0x800a, hwnd=0x1020c, idObject=-4, idChild=0) [0086.872] NotifyWinEvent (event=0x800c, hwnd=0x1020c, idObject=-4, idChild=0) [0086.872] SetWindowPos (hWnd=0x10214, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0086.872] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x46, wParam=0x0, lParam=0x14e450) returned 0x0 [0086.872] GetCapture () returned 0x1020c [0086.872] ReleaseCapture () returned 1 [0086.873] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0086.873] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.873] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x27b031e) returned 0x1 [0086.873] IsWindowUnicode (hWnd=0x1020c) returned 1 [0086.873] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.873] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x27b031e) returned 0x1 [0086.873] SetCursor (hCursor=0x10003) returned 0x10003 [0086.873] TranslateMessage (lpMsg=0x14edb0) returned 0 [0086.873] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0086.873] GetKeyState (nVirtKey=1) returned 0 [0086.873] GetKeyState (nVirtKey=2) returned 0 [0086.873] GetKeyState (nVirtKey=4) returned 0 [0086.873] GetKeyState (nVirtKey=5) returned 0 [0086.873] GetKeyState (nVirtKey=6) returned 0 [0086.873] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0086.873] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0086.873] WaitMessage () returned 1 [0086.938] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.938] IsWindowUnicode (hWnd=0x201c8) returned 1 [0086.938] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0086.938] TranslateMessage (lpMsg=0x14edb0) returned 0 [0086.938] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0086.938] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0086.938] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0086.938] WaitMessage () returned 1 [0087.047] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0087.047] IsWindowUnicode (hWnd=0x201c8) returned 1 [0087.047] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0087.047] TranslateMessage (lpMsg=0x14edb0) returned 0 [0087.047] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0087.047] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0087.047] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0087.047] WaitMessage () returned 1 [0087.156] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0087.156] IsWindowUnicode (hWnd=0x201c8) returned 1 [0087.156] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0087.157] TranslateMessage (lpMsg=0x14edb0) returned 0 [0087.157] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0087.157] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0087.157] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0087.157] WaitMessage () returned 1 [0087.266] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0087.266] IsWindowUnicode (hWnd=0x201c8) returned 1 [0087.266] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0087.266] TranslateMessage (lpMsg=0x14edb0) returned 0 [0087.266] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0087.266] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0087.266] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0087.266] WaitMessage () returned 1 [0087.375] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0087.375] IsWindowUnicode (hWnd=0x201c8) returned 1 [0087.375] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0087.375] TranslateMessage (lpMsg=0x14edb0) returned 0 [0087.375] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0087.375] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0087.375] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0087.375] WaitMessage () returned 1 [0087.468] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0087.468] IsWindowUnicode (hWnd=0x301ee) returned 1 [0087.468] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0087.468] TranslateMessage (lpMsg=0x14edb0) returned 0 [0087.468] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0087.469] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0087.469] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0087.470] CoTaskMemFree (pv=0xa692f0) [0087.470] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0087.470] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0087.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0087.470] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0087.470] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0087.470] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e500) returned 1 [0087.470] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x274 [0087.470] GetFileType (hFile=0x274) returned 0x1 [0087.470] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e470) returned 1 [0087.470] GetFileType (hFile=0x274) returned 0x1 [0087.470] ReadFile (in: hFile=0x274, lpBuffer=0x222e950, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x222e950*, lpNumberOfBytesRead=0x14e5d8*=0x2, lpOverlapped=0x0) returned 1 [0087.470] ReadFile (in: hFile=0x274, lpBuffer=0x222e950, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x222e950*, lpNumberOfBytesRead=0x14e5d8*=0x0, lpOverlapped=0x0) returned 1 [0087.471] CloseHandle (hObject=0x274) returned 1 [0087.472] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0087.472] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0087.472] CoTaskMemFree (pv=0xa692f0) [0087.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0087.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0087.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0087.472] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0087.472] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0087.472] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0087.472] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e4c0) returned 1 [0087.472] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x274 [0087.473] GetFileType (hFile=0x274) returned 0x1 [0087.473] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e430) returned 1 [0087.473] GetFileType (hFile=0x274) returned 0x1 [0087.474] WriteFile (in: hFile=0x274, lpBuffer=0x2231ca0*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x14e508, lpOverlapped=0x0 | out: lpBuffer=0x2231ca0*, lpNumberOfBytesWritten=0x14e508*=0x2, lpOverlapped=0x0) returned 1 [0087.475] CloseHandle (hObject=0x274) returned 1 [0087.475] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0087.475] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0087.475] GetSystemMetrics (nIndex=42) returned 0 [0087.475] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e600, nMaxCount=5 | out: lpString="4:42") returned 4 [0087.475] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e600) returned 0x4 [0087.476] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0087.476] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0087.476] GetSystemMetrics (nIndex=42) returned 0 [0087.476] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e5a0, nMaxCount=5 | out: lpString="4:42") returned 4 [0087.476] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e5a0) returned 0x4 [0087.476] SetWindowTextW (hWnd=0x201da, lpString="4:41") returned 1 [0087.476] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xc, wParam=0x0, lParam=0x222f9c4) returned 0x1 [0087.476] GetStockObject (i=5) returned 0x1900015 [0087.476] GetDlgItem (hDlg=0x401fa, nIDDlgItem=131546) returned 0x201da [0087.476] SendMessageW (hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0087.476] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0087.476] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0087.476] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0087.476] GetSystemMetrics (nIndex=42) returned 0 [0087.476] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e460, nMaxCount=5 | out: lpString="4:41") returned 4 [0087.476] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e460) returned 0x4 [0087.477] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0087.477] AdjustWindowRectEx (in: lpRect=0x14e478, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e478) returned 1 [0087.477] SelectObject (hdc=0x8010893, h=0x200a0899) returned 0x120a086d [0087.477] DrawTextExW (in: hdc=0x8010893, lpchText="4:41", cchText=4, lprc=0x14e3e8, format=0x2400, lpdtp=0x2232f58 | out: lpchText="4:41", lprc=0x14e3e8) returned 20 [0087.477] InvalidateRect (hWnd=0x201da, lpRect=0x0, bErase=1) returned 1 [0087.477] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0087.477] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0087.477] GetSystemMetrics (nIndex=42) returned 0 [0087.477] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14e3d0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0087.477] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14e3d0) returned 0xc [0087.477] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0087.477] IsWindowUnicode (hWnd=0x201da) returned 1 [0087.477] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0087.477] TranslateMessage (lpMsg=0x14edb0) returned 0 [0087.477] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0087.477] BeginPaint (in: hWnd=0x201da, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0x5010830 [0087.477] SelectPalette (hdc=0x5010830, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0087.477] CreateCompatibleDC (hdc=0x5010830) returned 0xffffffff96010880 [0087.478] SelectObject (hdc=0xffffffff96010880, h=0x29050250) returned 0x185000f [0087.478] GdipCreateFromHDC (hdc=0xffffffff96010880, graphics=0x14e428) returned 0x0 [0087.478] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0087.478] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=40, height=20, combineMode=0x0) returned 0x0 [0087.478] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0087.478] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0087.478] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14e4b8) returned 0x0 [0087.478] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0087.478] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0087.478] LocalFree (hMem=0xa931f0) returned 0x0 [0087.478] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0087.478] GdipCreateRegion (region=0x14e450) returned 0x0 [0087.478] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0087.478] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0087.478] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0087.478] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0087.478] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0087.478] GetSystemMetrics (nIndex=42) returned 0 [0087.478] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:41") returned 4 [0087.478] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0087.478] GetClientRect (in: hWnd=0x201da, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0087.479] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0087.479] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0087.479] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0087.479] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0087.479] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0087.479] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0087.479] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0087.479] LocalFree (hMem=0xa931f0) returned 0x0 [0087.479] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0087.479] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0087.479] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0087.479] LocalFree (hMem=0xa931f0) returned 0x0 [0087.479] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0087.479] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0087.479] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0087.479] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0087.479] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0087.479] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0087.479] GetCurrentObject (hdc=0xffffffff96010880, type=0x1) returned 0x1b00017 [0087.479] GetCurrentObject (hdc=0xffffffff96010880, type=0x2) returned 0x1900010 [0087.479] GetCurrentObject (hdc=0xffffffff96010880, type=0x7) returned 0x29050250 [0087.479] GetCurrentObject (hdc=0xffffffff96010880, type=0x6) returned 0x18a002e [0087.479] SaveDC (hdc=0xffffffff96010880) returned 1 [0087.480] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffb804086f [0087.480] GetClipRgn (hdc=0xffffffff96010880, hrgn=0xffffffffb804086f) returned 0 [0087.480] SelectClipRgn (hdc=0xffffffff96010880, hrgn=0xffffffffe0040872) returned 2 [0087.480] DeleteObject (ho=0xffffffffb804086f) returned 1 [0087.480] DeleteObject (ho=0xffffffffe0040872) returned 1 [0087.480] OffsetViewportOrgEx (in: hdc=0xffffffff96010880, x=0, y=0, lppt=0x2233658 | out: lppt=0x2233658) returned 1 [0087.480] GetNearestColor (hdc=0xffffffff96010880, color=0xa0) returned 0xa0 [0087.480] CreateSolidBrush (color=0xa0) returned 0xffffffffa3100860 [0087.480] FillRect (hDC=0xffffffff96010880, lprc=0x14e1e8, hbr=0xffffffffa3100860) returned 1 [0087.480] DeleteObject (ho=0xffffffffa3100860) returned 1 [0087.480] RestoreDC (hdc=0xffffffff96010880, nSavedDC=-1) returned 1 [0087.480] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff96010880) returned 0x0 [0087.480] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd380dbd) returned 0x0 [0087.480] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0087.480] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0087.480] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0087.480] GetSystemMetrics (nIndex=42) returned 0 [0087.480] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:41") returned 4 [0087.480] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0087.480] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0087.480] GetCurrentObject (hdc=0xffffffff96010880, type=0x1) returned 0x1b00017 [0087.481] GetCurrentObject (hdc=0xffffffff96010880, type=0x2) returned 0x1900010 [0087.481] GetCurrentObject (hdc=0xffffffff96010880, type=0x7) returned 0x29050250 [0087.481] GetCurrentObject (hdc=0xffffffff96010880, type=0x6) returned 0x18a002e [0087.481] SaveDC (hdc=0xffffffff96010880) returned 1 [0087.481] GetNearestColor (hdc=0xffffffff96010880, color=0xffffff) returned 0xffffff [0087.481] RestoreDC (hdc=0xffffffff96010880, nSavedDC=-1) returned 1 [0087.481] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff96010880) returned 0x0 [0087.481] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0087.481] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0087.481] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0087.481] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0087.481] GetCurrentObject (hdc=0xffffffff96010880, type=0x1) returned 0x1b00017 [0087.481] GetCurrentObject (hdc=0xffffffff96010880, type=0x2) returned 0x1900010 [0087.481] GetCurrentObject (hdc=0xffffffff96010880, type=0x7) returned 0x29050250 [0087.481] GetCurrentObject (hdc=0xffffffff96010880, type=0x6) returned 0x18a002e [0087.481] SaveDC (hdc=0xffffffff96010880) returned 1 [0087.481] GetTextAlign (hdc=0xffffffff96010880) returned 0x0 [0087.481] GetTextColor (hdc=0xffffffff96010880) returned 0x0 [0087.482] SetTextColor (hdc=0xffffffff96010880, color=0xffffff) returned 0x0 [0087.482] GetCurrentObject (hdc=0xffffffff96010880, type=0x6) returned 0x18a002e [0087.482] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0087.482] SelectObject (hdc=0xffffffff96010880, h=0x200a0899) returned 0x18a002e [0087.482] GetBkMode (hdc=0xffffffff96010880) returned 2 [0087.482] SetBkMode (hdc=0xffffffff96010880, mode=1) returned 2 [0087.482] DrawTextExW (in: hdc=0xffffffff96010880, lpchText="4:41", cchText=4, lprc=0x14e1c8, format=0x0, lpdtp=0x2233ee8 | out: lpchText="4:41", lprc=0x14e1c8) returned 20 [0087.482] RestoreDC (hdc=0xffffffff96010880, nSavedDC=-1) returned 1 [0087.482] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff96010880) returned 0x0 [0087.482] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0087.482] BitBlt (hdc=0x5010830, x=0, y=0, cx=40, cy=20, hdcSrc=0xffffffff96010880, x1=0, y1=0, rop=0xcc0020) returned 1 [0087.482] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff96010880) returned 0x0 [0087.482] SelectPalette (hdc=0x5010830, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0087.482] SelectObject (hdc=0xffffffff96010880, h=0x185000f) returned 0x29050250 [0087.482] DeleteDC (hdc=0xffffffff96010880) returned 1 [0087.483] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0087.483] EndPaint (hWnd=0x201da, lpPaint=0x14e448) returned 1 [0087.483] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0087.483] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0087.483] WaitMessage () returned 1 [0087.485] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0087.485] IsWindowUnicode (hWnd=0x201c8) returned 1 [0087.485] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0087.485] TranslateMessage (lpMsg=0x14edb0) returned 0 [0087.485] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0087.485] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0087.485] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0087.485] WaitMessage () returned 1 [0087.595] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0087.595] IsWindowUnicode (hWnd=0x201c8) returned 1 [0087.595] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0087.595] TranslateMessage (lpMsg=0x14edb0) returned 0 [0087.595] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0087.595] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0087.595] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0087.595] WaitMessage () returned 1 [0087.702] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0087.702] IsWindowUnicode (hWnd=0x201c8) returned 1 [0087.703] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0087.703] TranslateMessage (lpMsg=0x14edb0) returned 0 [0087.703] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0087.703] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0087.703] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0087.703] WaitMessage () returned 1 [0087.812] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0087.812] IsWindowUnicode (hWnd=0x201c8) returned 1 [0087.812] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0087.812] TranslateMessage (lpMsg=0x14edb0) returned 0 [0087.812] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0087.812] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0087.812] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0087.812] WaitMessage () returned 1 [0087.921] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0087.921] IsWindowUnicode (hWnd=0x201c8) returned 1 [0087.921] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0087.921] TranslateMessage (lpMsg=0x14edb0) returned 0 [0087.921] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0087.921] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0087.921] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0087.921] WaitMessage () returned 1 [0088.030] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0088.030] IsWindowUnicode (hWnd=0x201c8) returned 1 [0088.030] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0088.030] TranslateMessage (lpMsg=0x14edb0) returned 0 [0088.030] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0088.030] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0088.030] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0088.030] WaitMessage () returned 1 [0088.139] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0088.139] IsWindowUnicode (hWnd=0x201c8) returned 1 [0088.139] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0088.139] TranslateMessage (lpMsg=0x14edb0) returned 0 [0088.139] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0088.139] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0088.139] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0088.139] WaitMessage () returned 1 [0088.156] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0088.156] IsWindowUnicode (hWnd=0x1020c) returned 1 [0088.156] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0088.157] GetKeyState (nVirtKey=16) returned 0 [0088.157] GetKeyState (nVirtKey=17) returned 0 [0088.157] GetKeyState (nVirtKey=18) returned -127 [0088.157] SendMessageW (hWnd=0x1020c, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0088.157] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x129, wParam=0x0, lParam=0x0) returned 0x1 [0088.157] GetKeyState (nVirtKey=16) returned 0 [0088.157] GetKeyState (nVirtKey=17) returned 0 [0088.157] GetKeyState (nVirtKey=18) returned -127 [0088.157] TranslateMessage (lpMsg=0x14edb0) returned 1 [0088.157] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0088.157] GetKeyState (nVirtKey=16) returned 0 [0088.157] GetKeyState (nVirtKey=17) returned 0 [0088.157] GetKeyState (nVirtKey=18) returned -127 [0088.157] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x104, wParam=0x12, lParam=0x20380001) returned 0x0 [0088.157] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0088.157] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0088.157] WaitMessage () returned 1 [0088.166] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0088.166] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x1f, wParam=0x0, lParam=0x0) returned 0x0 [0088.166] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0088.166] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x86, wParam=0x0, lParam=0x0) returned 0x1 [0088.167] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0088.167] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0088.167] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0088.168] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x1c, wParam=0x0, lParam=0x444) returned 0x0 [0088.168] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x1c, wParam=0x0, lParam=0x444) returned 0x0 [0088.168] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x1c, wParam=0x0, lParam=0x444) returned 0x0 [0088.168] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401e4, Msg=0x1c, wParam=0x0, lParam=0x444) returned 0x0 [0088.168] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301a2, Msg=0x1c, wParam=0x0, lParam=0x444) returned 0x0 [0088.168] NtdllDefWindowProc_W (hWnd=0x40120, Msg=0x1c, wParam=0x0, lParam=0x444) returned 0x0 [0088.168] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x1c, wParam=0x0, lParam=0x444) returned 0x0 [0088.168] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x8, wParam=0x0, lParam=0x0) returned 0x0 [0088.168] GetCapture () returned 0x0 [0088.168] InvalidateRect (hWnd=0x1020c, lpRect=0x0, bErase=0) returned 1 [0088.168] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x281, wParam=0x0, lParam=0xc000000f) returned 0x0 [0088.168] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0088.168] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x282, wParam=0x1, lParam=0x0) returned 0x0 [0088.168] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0088.168] IsWindowUnicode (hWnd=0x1020c) returned 1 [0088.168] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0088.169] TranslateMessage (lpMsg=0x14edb0) returned 0 [0088.169] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0088.169] BeginPaint (in: hWnd=0x1020c, lpPaint=0x14e478 | out: lpPaint=0x14e478) returned 0x5010830 [0088.169] SelectPalette (hdc=0x5010830, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0088.169] CreateCompatibleDC (hdc=0x5010830) returned 0xffffffff9b010880 [0088.169] SelectObject (hdc=0xffffffff9b010880, h=0x29050250) returned 0x185000f [0088.169] GdipCreateFromHDC (hdc=0xffffffff9b010880, graphics=0x14e3f8) returned 0x0 [0088.169] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0088.169] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=408, height=23, combineMode=0x0) returned 0x0 [0088.169] GdipCreateMatrix (matrix=0x14e420) returned 0x0 [0088.169] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0088.169] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14e488) returned 0x0 [0088.169] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0088.169] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0088.169] LocalFree (hMem=0xa931f0) returned 0x0 [0088.169] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0088.169] GdipCreateRegion (region=0x14e420) returned 0x0 [0088.169] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0088.169] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e480) returned 0x0 [0088.169] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e520) returned 0x0 [0088.169] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd360dbd) returned 0x0 [0088.169] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0088.170] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e198) returned 0x0 [0088.170] GetCurrentObject (hdc=0xffffffff9b010880, type=0x1) returned 0x1b00017 [0088.170] GetCurrentObject (hdc=0xffffffff9b010880, type=0x2) returned 0x1900010 [0088.170] GetCurrentObject (hdc=0xffffffff9b010880, type=0x7) returned 0x29050250 [0088.170] GetCurrentObject (hdc=0xffffffff9b010880, type=0x6) returned 0x18a002e [0088.170] SaveDC (hdc=0xffffffff9b010880) returned 1 [0088.170] GetNearestColor (hdc=0xffffffff9b010880, color=0xa0) returned 0xa0 [0088.170] GetNearestColor (hdc=0xffffffff9b010880, color=0x35) returned 0x35 [0088.170] GetNearestColor (hdc=0xffffffff9b010880, color=0x0) returned 0x0 [0088.170] GetNearestColor (hdc=0xffffffff9b010880, color=0x4848e5) returned 0x4848e5 [0088.170] GetNearestColor (hdc=0xffffffff9b010880, color=0x0) returned 0x0 [0088.170] GetNearestColor (hdc=0xffffffff9b010880, color=0x5151ff) returned 0x5151ff [0088.170] GetNearestColor (hdc=0xffffffff9b010880, color=0x4848e5) returned 0x4848e5 [0088.170] GetNearestColor (hdc=0xffffffff9b010880, color=0xc0) returned 0xc0 [0088.170] GetNearestColor (hdc=0xffffffff9b010880, color=0x0) returned 0x0 [0088.170] RestoreDC (hdc=0xffffffff9b010880, nSavedDC=-1) returned 1 [0088.170] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff9b010880) returned 0x0 [0088.170] IsAppThemed () returned 0x1 [0088.170] GetThemeAppProperties () returned 0x3 [0088.170] GetThemeAppProperties () returned 0x3 [0088.171] IsAppThemed () returned 0x1 [0088.171] GetThemeAppProperties () returned 0x3 [0088.171] GetThemeAppProperties () returned 0x3 [0088.171] SelectObject (hdc=0x8010893, h=0x120a086d) returned 0x200a0899 [0088.171] DrawTextExW (in: hdc=0x8010893, lpchText="Check", cchText=5, lprc=0x14de08, format=0x2415, lpdtp=0x2234d98 | out: lpchText="Check", lprc=0x14de08) returned 13 [0088.171] IsAppThemed () returned 0x1 [0088.171] GetThemeAppProperties () returned 0x3 [0088.171] GetThemeAppProperties () returned 0x3 [0088.171] IsAppThemed () returned 0x1 [0088.171] GetThemeAppProperties () returned 0x3 [0088.171] GetThemeAppProperties () returned 0x3 [0088.171] IsAppThemed () returned 0x1 [0088.171] GetThemeAppProperties () returned 0x3 [0088.171] GetThemeAppProperties () returned 0x3 [0088.171] IsAppThemed () returned 0x1 [0088.171] GetThemeAppProperties () returned 0x3 [0088.171] GetThemeAppProperties () returned 0x3 [0088.171] IsThemePartDefined () returned 0x1 [0088.171] IsAppThemed () returned 0x1 [0088.171] GetThemeAppProperties () returned 0x3 [0088.171] GetThemeAppProperties () returned 0x3 [0088.171] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0088.171] IsAppThemed () returned 0x1 [0088.171] GetThemeAppProperties () returned 0x3 [0088.171] GetThemeAppProperties () returned 0x3 [0088.171] IsAppThemed () returned 0x1 [0088.171] GetThemeAppProperties () returned 0x3 [0088.171] GetThemeAppProperties () returned 0x3 [0088.171] IsThemePartDefined () returned 0x1 [0088.171] GdipCreateRegion (region=0x14df00) returned 0x0 [0088.171] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0088.171] GdipCreateMatrix (matrix=0x14df00) returned 0x0 [0088.171] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0088.171] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14df68) returned 0x0 [0088.171] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0088.171] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0088.171] LocalFree (hMem=0xa931f0) returned 0x0 [0088.171] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0088.172] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0088.172] LocalFree (hMem=0xa931f0) returned 0x0 [0088.172] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0088.172] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14dfd0) returned 0x0 [0088.172] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df90) returned 0x0 [0088.172] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df90) returned 0x0 [0088.172] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0088.172] GdipGetDC (graphics=0x1afd81d0, hdc=0x14dfd8) returned 0x0 [0088.172] GetCurrentObject (hdc=0xffffffff9b010880, type=0x1) returned 0x1b00017 [0088.172] GetCurrentObject (hdc=0xffffffff9b010880, type=0x2) returned 0x1900010 [0088.172] GetCurrentObject (hdc=0xffffffff9b010880, type=0x7) returned 0x29050250 [0088.172] GetCurrentObject (hdc=0xffffffff9b010880, type=0x6) returned 0x18a002e [0088.172] SaveDC (hdc=0xffffffff9b010880) returned 1 [0088.172] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffe1040872 [0088.172] GetClipRgn (hdc=0xffffffff9b010880, hrgn=0xffffffffe1040872) returned 0 [0088.172] SelectClipRgn (hdc=0xffffffff9b010880, hrgn=0xffffffffbd04086f) returned 2 [0088.172] DeleteObject (ho=0xffffffffe1040872) returned 1 [0088.172] DeleteObject (ho=0xffffffffbd04086f) returned 1 [0088.172] OffsetViewportOrgEx (in: hdc=0xffffffff9b010880, x=0, y=0, lppt=0x2235780 | out: lppt=0x2235780) returned 1 [0088.172] DrawThemeParentBackground () returned 0x0 [0088.173] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14db88 | out: lpwndpl=0x14db88) returned 1 [0088.173] GetClientRect (in: hWnd=0x401fa, lpRect=0x14daa0 | out: lpRect=0x14daa0) returned 1 [0088.173] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0088.173] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0088.173] GetSystemMetrics (nIndex=42) returned 0 [0088.173] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d800, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0088.173] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d800) returned 0xc [0088.173] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d888 | out: lpRect=0x14d888) returned 1 [0088.173] GetCurrentObject (hdc=0xffffffff9b010880, type=0x1) returned 0x1b00017 [0088.173] GetCurrentObject (hdc=0xffffffff9b010880, type=0x2) returned 0x1900010 [0088.173] GetCurrentObject (hdc=0xffffffff9b010880, type=0x7) returned 0x29050250 [0088.173] GetCurrentObject (hdc=0xffffffff9b010880, type=0x6) returned 0x18a002e [0088.173] SaveDC (hdc=0xffffffff9b010880) returned 2 [0088.173] GetNearestColor (hdc=0xffffffff9b010880, color=0xa0) returned 0xa0 [0088.173] CreateSolidBrush (color=0xa0) returned 0xffffffffa4100860 [0088.173] FillRect (hDC=0xffffffff9b010880, lprc=0x14d578, hbr=0xffffffffa4100860) returned 1 [0088.173] DeleteObject (ho=0xffffffffa4100860) returned 1 [0088.173] RestoreDC (hdc=0xffffffff9b010880, nSavedDC=-1) returned 1 [0088.173] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0088.173] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0088.174] GetSystemMetrics (nIndex=42) returned 0 [0088.174] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0088.174] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0088.174] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d7b8 | out: lpRect=0x14d7b8) returned 1 [0088.174] GetCurrentObject (hdc=0xffffffff9b010880, type=0x1) returned 0x1b00017 [0088.174] GetCurrentObject (hdc=0xffffffff9b010880, type=0x2) returned 0x1900010 [0088.174] GetCurrentObject (hdc=0xffffffff9b010880, type=0x7) returned 0x29050250 [0088.174] GetCurrentObject (hdc=0xffffffff9b010880, type=0x6) returned 0x18a002e [0088.174] SaveDC (hdc=0xffffffff9b010880) returned 2 [0088.174] GetNearestColor (hdc=0xffffffff9b010880, color=0xa0) returned 0xa0 [0088.174] CreateSolidBrush (color=0xa0) returned 0xffffffffa5100860 [0088.174] FillRect (hDC=0xffffffff9b010880, lprc=0x14d4a8, hbr=0xffffffffa5100860) returned 1 [0088.174] DeleteObject (ho=0xffffffffa5100860) returned 1 [0088.174] RestoreDC (hdc=0xffffffff9b010880, nSavedDC=-1) returned 1 [0088.174] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0088.174] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0088.174] GetSystemMetrics (nIndex=42) returned 0 [0088.174] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0088.174] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0088.174] RestoreDC (hdc=0xffffffff9b010880, nSavedDC=-1) returned 1 [0088.175] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff9b010880) returned 0x0 [0088.175] IsAppThemed () returned 0x1 [0088.175] GetThemeAppProperties () returned 0x3 [0088.175] GetThemeAppProperties () returned 0x3 [0088.175] IsAppThemed () returned 0x1 [0088.175] GetThemeAppProperties () returned 0x3 [0088.175] GetThemeAppProperties () returned 0x3 [0088.175] IsThemePartDefined () returned 0x1 [0088.175] GdipCreateRegion (region=0x14dea0) returned 0x0 [0088.175] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0088.175] GdipCreateMatrix (matrix=0x14dea0) returned 0x0 [0088.175] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0088.175] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14df08) returned 0x0 [0088.175] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0088.175] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0088.175] LocalFree (hMem=0xa931f0) returned 0x0 [0088.175] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0088.175] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0088.175] LocalFree (hMem=0xa931f0) returned 0x0 [0088.175] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0088.175] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df70) returned 0x0 [0088.175] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df30) returned 0x0 [0088.175] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df30) returned 0x0 [0088.176] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0088.176] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df78) returned 0x0 [0088.176] GetCurrentObject (hdc=0xffffffff9b010880, type=0x1) returned 0x1b00017 [0088.176] GetCurrentObject (hdc=0xffffffff9b010880, type=0x2) returned 0x1900010 [0088.176] GetCurrentObject (hdc=0xffffffff9b010880, type=0x7) returned 0x29050250 [0088.176] GetCurrentObject (hdc=0xffffffff9b010880, type=0x6) returned 0x18a002e [0088.176] SaveDC (hdc=0xffffffff9b010880) returned 1 [0088.176] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffbe04086f [0088.176] GetClipRgn (hdc=0xffffffff9b010880, hrgn=0xffffffffbe04086f) returned 0 [0088.176] SelectClipRgn (hdc=0xffffffff9b010880, hrgn=0xffffffffe3040872) returned 2 [0088.176] DeleteObject (ho=0xffffffffbe04086f) returned 1 [0088.176] DeleteObject (ho=0xffffffffe3040872) returned 1 [0088.176] OffsetViewportOrgEx (in: hdc=0xffffffff9b010880, x=0, y=0, lppt=0x2236588 | out: lppt=0x2236588) returned 1 [0088.176] IsAppThemed () returned 0x1 [0088.176] GetThemeAppProperties () returned 0x3 [0088.176] GetThemeAppProperties () returned 0x3 [0088.176] DrawThemeBackground () returned 0x0 [0088.176] RestoreDC (hdc=0xffffffff9b010880, nSavedDC=-1) returned 1 [0088.176] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff9b010880) returned 0x0 [0088.177] GdipCreateRegion (region=0x14de90) returned 0x0 [0088.177] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0088.177] GdipCreateMatrix (matrix=0x14de90) returned 0x0 [0088.177] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0088.177] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14def8) returned 0x0 [0088.177] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0088.177] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0088.177] LocalFree (hMem=0xa931f0) returned 0x0 [0088.177] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0088.177] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0088.177] LocalFree (hMem=0xa931f0) returned 0x0 [0088.177] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0088.177] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df60) returned 0x0 [0088.177] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df20) returned 0x0 [0088.177] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df20) returned 0x0 [0088.177] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0088.177] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df68) returned 0x0 [0088.177] GetCurrentObject (hdc=0xffffffff9b010880, type=0x1) returned 0x1b00017 [0088.177] GetCurrentObject (hdc=0xffffffff9b010880, type=0x2) returned 0x1900010 [0088.178] GetCurrentObject (hdc=0xffffffff9b010880, type=0x7) returned 0x29050250 [0088.178] GetCurrentObject (hdc=0xffffffff9b010880, type=0x6) returned 0x18a002e [0088.178] SaveDC (hdc=0xffffffff9b010880) returned 1 [0088.178] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffe4040872 [0088.178] GetClipRgn (hdc=0xffffffff9b010880, hrgn=0xffffffffe4040872) returned 0 [0088.178] SelectClipRgn (hdc=0xffffffff9b010880, hrgn=0xffffffffbf04086f) returned 2 [0088.178] DeleteObject (ho=0xffffffffe4040872) returned 1 [0088.178] DeleteObject (ho=0xffffffffbf04086f) returned 1 [0088.178] OffsetViewportOrgEx (in: hdc=0xffffffff9b010880, x=0, y=0, lppt=0x2236a60 | out: lppt=0x2236a60) returned 1 [0088.178] IsAppThemed () returned 0x1 [0088.178] GetThemeAppProperties () returned 0x3 [0088.178] GetThemeAppProperties () returned 0x3 [0088.178] GetThemeBackgroundContentRect () returned 0x0 [0088.178] RestoreDC (hdc=0xffffffff9b010880, nSavedDC=-1) returned 1 [0088.179] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff9b010880) returned 0x0 [0088.179] IsAppThemed () returned 0x1 [0088.179] GetThemeAppProperties () returned 0x3 [0088.179] GetThemeAppProperties () returned 0x3 [0088.179] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e148) returned 0x0 [0088.179] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e128) returned 0x0 [0088.179] GetCurrentObject (hdc=0xffffffff9b010880, type=0x1) returned 0x1b00017 [0088.179] GetCurrentObject (hdc=0xffffffff9b010880, type=0x2) returned 0x1900010 [0088.179] GetCurrentObject (hdc=0xffffffff9b010880, type=0x7) returned 0x29050250 [0088.179] GetCurrentObject (hdc=0xffffffff9b010880, type=0x6) returned 0x18a002e [0088.179] SaveDC (hdc=0xffffffff9b010880) returned 1 [0088.179] GetTextAlign (hdc=0xffffffff9b010880) returned 0x0 [0088.179] GetTextColor (hdc=0xffffffff9b010880) returned 0x0 [0088.179] GetCurrentObject (hdc=0xffffffff9b010880, type=0x6) returned 0x18a002e [0088.179] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dc60 | out: pv=0x14dc60) returned 92 [0088.179] SelectObject (hdc=0xffffffff9b010880, h=0x120a086d) returned 0x18a002e [0088.179] GetBkMode (hdc=0xffffffff9b010880) returned 2 [0088.179] SetBkMode (hdc=0xffffffff9b010880, mode=1) returned 2 [0088.179] DrawTextExW (in: hdc=0xffffffff9b010880, lpchText="Check", cchText=5, lprc=0x14dea0, format=0x2415, lpdtp=0x2237040 | out: lpchText="Check", lprc=0x14dea0) returned 13 [0088.180] DrawTextExW (in: hdc=0xffffffff9b010880, lpchText="Check", cchText=5, lprc=0x14e0b8, format=0x2015, lpdtp=0x2237040 | out: lpchText="Check", lprc=0x14e0b8) returned 13 [0088.180] RestoreDC (hdc=0xffffffff9b010880, nSavedDC=-1) returned 1 [0088.180] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff9b010880) returned 0x0 [0088.180] GetFocus () returned 0x0 [0088.180] IsAppThemed () returned 0x1 [0088.180] GetThemeAppProperties () returned 0x3 [0088.180] GetThemeAppProperties () returned 0x3 [0088.180] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e438) returned 0x0 [0088.180] BitBlt (hdc=0x5010830, x=0, y=0, cx=408, cy=23, hdcSrc=0xffffffff9b010880, x1=0, y1=0, rop=0xcc0020) returned 1 [0088.180] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffff9b010880) returned 0x0 [0088.180] SelectPalette (hdc=0x5010830, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0088.180] SelectObject (hdc=0xffffffff9b010880, h=0x185000f) returned 0x29050250 [0088.180] DeleteDC (hdc=0xffffffff9b010880) returned 1 [0088.180] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0088.180] EndPaint (hWnd=0x1020c, lpPaint=0x14e418) returned 1 [0088.180] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0088.180] IsWindowUnicode (hWnd=0x10212) returned 1 [0088.180] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0088.181] TranslateMessage (lpMsg=0x14edb0) returned 0 [0088.181] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0088.181] SetWindowPos (hWnd=0x401fa, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0088.181] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x46, wParam=0x0, lParam=0x14e690) returned 0x0 [0088.181] SetWindowPos (hWnd=0x201ca, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0088.181] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x46, wParam=0x0, lParam=0x14e690) returned 0x0 [0088.181] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0088.181] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0088.181] WaitMessage () returned 1 [0088.248] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0088.249] IsWindowUnicode (hWnd=0x201c8) returned 1 [0088.249] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0088.249] TranslateMessage (lpMsg=0x14edb0) returned 0 [0088.249] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0088.249] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0088.249] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0088.249] WaitMessage () returned 1 [0088.264] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0088.264] IsWindowUnicode (hWnd=0x201ec) returned 1 [0088.264] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0088.264] TranslateMessage (lpMsg=0x14edb0) returned 0 [0088.264] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0088.264] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0088.264] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0088.264] WaitMessage () returned 1 [0088.358] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0088.358] IsWindowUnicode (hWnd=0x201c8) returned 1 [0088.358] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0088.358] TranslateMessage (lpMsg=0x14edb0) returned 0 [0088.358] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0088.358] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0088.358] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0088.358] WaitMessage () returned 1 [0088.479] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0088.479] IsWindowUnicode (hWnd=0x201e6) returned 1 [0088.479] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0088.479] TranslateMessage (lpMsg=0x14edb0) returned 0 [0088.479] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0088.479] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0088.479] IsWindowUnicode (hWnd=0x201c8) returned 1 [0088.479] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0088.479] TranslateMessage (lpMsg=0x14edb0) returned 0 [0088.479] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0088.479] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0088.479] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0088.479] WaitMessage () returned 1 [0088.482] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0088.482] IsWindowUnicode (hWnd=0x301ee) returned 1 [0088.482] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0088.482] TranslateMessage (lpMsg=0x14edb0) returned 0 [0088.482] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0088.483] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0088.483] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0088.483] CoTaskMemFree (pv=0xa692f0) [0088.483] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0088.483] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0088.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0088.483] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.483] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0088.483] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0088.483] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e500) returned 1 [0088.484] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x274 [0088.484] GetFileType (hFile=0x274) returned 0x1 [0088.484] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e470) returned 1 [0088.484] GetFileType (hFile=0x274) returned 0x1 [0088.484] ReadFile (in: hFile=0x274, lpBuffer=0x2238db8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x2238db8*, lpNumberOfBytesRead=0x14e5d8*=0x2, lpOverlapped=0x0) returned 1 [0088.484] ReadFile (in: hFile=0x274, lpBuffer=0x2238db8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x2238db8*, lpNumberOfBytesRead=0x14e5d8*=0x0, lpOverlapped=0x0) returned 1 [0088.484] CloseHandle (hObject=0x274) returned 1 [0088.485] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0088.485] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0088.485] CoTaskMemFree (pv=0xa692f0) [0088.485] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0088.485] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0088.485] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0088.485] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0088.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0088.486] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0088.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e4c0) returned 1 [0088.486] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x274 [0088.486] GetFileType (hFile=0x274) returned 0x1 [0088.486] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e430) returned 1 [0088.487] GetFileType (hFile=0x274) returned 0x1 [0088.487] WriteFile (in: hFile=0x274, lpBuffer=0x223c108*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x14e508, lpOverlapped=0x0 | out: lpBuffer=0x223c108*, lpNumberOfBytesWritten=0x14e508*=0x2, lpOverlapped=0x0) returned 1 [0088.487] CloseHandle (hObject=0x274) returned 1 [0088.488] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0088.488] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0088.488] GetSystemMetrics (nIndex=42) returned 0 [0088.488] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e600, nMaxCount=5 | out: lpString="4:41") returned 4 [0088.488] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e600) returned 0x4 [0088.488] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0088.488] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0088.488] GetSystemMetrics (nIndex=42) returned 0 [0088.488] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e5a0, nMaxCount=5 | out: lpString="4:41") returned 4 [0088.488] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e5a0) returned 0x4 [0088.488] SetWindowTextW (hWnd=0x201da, lpString="4:40") returned 1 [0088.488] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xc, wParam=0x0, lParam=0x2239e2c) returned 0x1 [0088.489] GetStockObject (i=5) returned 0x1900015 [0088.489] GetDlgItem (hDlg=0x401fa, nIDDlgItem=131546) returned 0x201da [0088.489] SendMessageW (hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0088.489] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0088.489] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0088.489] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0088.489] GetSystemMetrics (nIndex=42) returned 0 [0088.489] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e460, nMaxCount=5 | out: lpString="4:40") returned 4 [0088.489] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e460) returned 0x4 [0088.489] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0088.489] AdjustWindowRectEx (in: lpRect=0x14e478, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e478) returned 1 [0088.489] SelectObject (hdc=0x8010893, h=0x200a0899) returned 0x120a086d [0088.489] DrawTextExW (in: hdc=0x8010893, lpchText="4:40", cchText=4, lprc=0x14e3e8, format=0x2400, lpdtp=0x223d3c0 | out: lpchText="4:40", lprc=0x14e3e8) returned 20 [0088.489] InvalidateRect (hWnd=0x201da, lpRect=0x0, bErase=1) returned 1 [0088.489] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0088.490] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0088.490] GetSystemMetrics (nIndex=42) returned 0 [0088.490] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14e3d0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0088.490] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14e3d0) returned 0xc [0088.490] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0088.490] IsWindowUnicode (hWnd=0x201da) returned 1 [0088.490] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0088.490] TranslateMessage (lpMsg=0x14edb0) returned 0 [0088.490] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0088.490] BeginPaint (in: hWnd=0x201da, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0xb010256 [0088.490] SelectPalette (hdc=0xb010256, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0088.490] CreateCompatibleDC (hdc=0xb010256) returned 0xffffffffa1010880 [0088.490] SelectObject (hdc=0xffffffffa1010880, h=0x29050250) returned 0x185000f [0088.490] GdipCreateFromHDC (hdc=0xffffffffa1010880, graphics=0x14e428) returned 0x0 [0088.490] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0088.490] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=40, height=20, combineMode=0x0) returned 0x0 [0088.490] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0088.490] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0088.490] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14e4b8) returned 0x0 [0088.490] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0088.490] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0088.490] LocalFree (hMem=0xa931f0) returned 0x0 [0088.490] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0088.491] GdipCreateRegion (region=0x14e450) returned 0x0 [0088.491] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0088.491] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0088.491] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0088.491] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0088.491] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0088.491] GetSystemMetrics (nIndex=42) returned 0 [0088.491] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:40") returned 4 [0088.491] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0088.491] GetClientRect (in: hWnd=0x201da, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0088.491] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0088.491] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0088.491] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0088.491] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0088.491] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0088.491] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0088.491] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0088.491] LocalFree (hMem=0xa931f0) returned 0x0 [0088.491] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0088.491] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0088.491] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0088.491] LocalFree (hMem=0xa931f0) returned 0x0 [0088.491] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0088.491] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0088.491] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0088.491] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0088.491] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0088.492] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0088.492] GetCurrentObject (hdc=0xffffffffa1010880, type=0x1) returned 0x1b00017 [0088.492] GetCurrentObject (hdc=0xffffffffa1010880, type=0x2) returned 0x1900010 [0088.492] GetCurrentObject (hdc=0xffffffffa1010880, type=0x7) returned 0x29050250 [0088.492] GetCurrentObject (hdc=0xffffffffa1010880, type=0x6) returned 0x18a002e [0088.492] SaveDC (hdc=0xffffffffa1010880) returned 1 [0088.492] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffc004086f [0088.492] GetClipRgn (hdc=0xffffffffa1010880, hrgn=0xffffffffc004086f) returned 0 [0088.492] SelectClipRgn (hdc=0xffffffffa1010880, hrgn=0xffffffffe8040872) returned 2 [0088.492] DeleteObject (ho=0xffffffffc004086f) returned 1 [0088.492] DeleteObject (ho=0xffffffffe8040872) returned 1 [0088.492] OffsetViewportOrgEx (in: hdc=0xffffffffa1010880, x=0, y=0, lppt=0x223dac0 | out: lppt=0x223dac0) returned 1 [0088.492] GetNearestColor (hdc=0xffffffffa1010880, color=0xa0) returned 0xa0 [0088.492] CreateSolidBrush (color=0xa0) returned 0xffffffffa6100860 [0088.492] FillRect (hDC=0xffffffffa1010880, lprc=0x14e1e8, hbr=0xffffffffa6100860) returned 1 [0088.492] DeleteObject (ho=0xffffffffa6100860) returned 1 [0088.492] RestoreDC (hdc=0xffffffffa1010880, nSavedDC=-1) returned 1 [0088.492] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffa1010880) returned 0x0 [0088.492] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd340dbd) returned 0x0 [0088.492] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0088.492] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0088.492] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0088.492] GetSystemMetrics (nIndex=42) returned 0 [0088.492] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:40") returned 4 [0088.493] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0088.493] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0088.493] GetCurrentObject (hdc=0xffffffffa1010880, type=0x1) returned 0x1b00017 [0088.493] GetCurrentObject (hdc=0xffffffffa1010880, type=0x2) returned 0x1900010 [0088.493] GetCurrentObject (hdc=0xffffffffa1010880, type=0x7) returned 0x29050250 [0088.493] GetCurrentObject (hdc=0xffffffffa1010880, type=0x6) returned 0x18a002e [0088.493] SaveDC (hdc=0xffffffffa1010880) returned 1 [0088.493] GetNearestColor (hdc=0xffffffffa1010880, color=0xffffff) returned 0xffffff [0088.493] RestoreDC (hdc=0xffffffffa1010880, nSavedDC=-1) returned 1 [0088.493] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffa1010880) returned 0x0 [0088.493] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0088.493] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0088.493] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0088.493] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0088.493] GetCurrentObject (hdc=0xffffffffa1010880, type=0x1) returned 0x1b00017 [0088.493] GetCurrentObject (hdc=0xffffffffa1010880, type=0x2) returned 0x1900010 [0088.493] GetCurrentObject (hdc=0xffffffffa1010880, type=0x7) returned 0x29050250 [0088.493] GetCurrentObject (hdc=0xffffffffa1010880, type=0x6) returned 0x18a002e [0088.493] SaveDC (hdc=0xffffffffa1010880) returned 1 [0088.493] GetTextAlign (hdc=0xffffffffa1010880) returned 0x0 [0088.493] GetTextColor (hdc=0xffffffffa1010880) returned 0x0 [0088.493] SetTextColor (hdc=0xffffffffa1010880, color=0xffffff) returned 0x0 [0088.494] GetCurrentObject (hdc=0xffffffffa1010880, type=0x6) returned 0x18a002e [0088.494] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0088.494] SelectObject (hdc=0xffffffffa1010880, h=0x200a0899) returned 0x18a002e [0088.494] GetBkMode (hdc=0xffffffffa1010880) returned 2 [0088.494] SetBkMode (hdc=0xffffffffa1010880, mode=1) returned 2 [0088.494] DrawTextExW (in: hdc=0xffffffffa1010880, lpchText="4:40", cchText=4, lprc=0x14e1c8, format=0x0, lpdtp=0x223e350 | out: lpchText="4:40", lprc=0x14e1c8) returned 20 [0088.494] RestoreDC (hdc=0xffffffffa1010880, nSavedDC=-1) returned 1 [0088.494] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffa1010880) returned 0x0 [0088.494] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0088.494] BitBlt (hdc=0xb010256, x=0, y=0, cx=40, cy=20, hdcSrc=0xffffffffa1010880, x1=0, y1=0, rop=0xcc0020) returned 1 [0088.494] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffa1010880) returned 0x0 [0088.494] SelectPalette (hdc=0xb010256, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0088.494] SelectObject (hdc=0xffffffffa1010880, h=0x185000f) returned 0x29050250 [0088.494] DeleteDC (hdc=0xffffffffa1010880) returned 1 [0088.494] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0088.494] EndPaint (hWnd=0x201da, lpPaint=0x14e448) returned 1 [0088.494] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0088.494] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0088.494] WaitMessage () returned 1 [0088.576] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0088.576] IsWindowUnicode (hWnd=0x201c8) returned 1 [0088.576] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0088.576] TranslateMessage (lpMsg=0x14edb0) returned 0 [0088.576] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0088.576] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0088.576] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0088.576] WaitMessage () returned 1 [0088.685] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0088.685] IsWindowUnicode (hWnd=0x201c8) returned 1 [0088.685] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0088.685] TranslateMessage (lpMsg=0x14edb0) returned 0 [0088.685] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0088.685] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0088.685] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0088.685] WaitMessage () returned 1 [0088.794] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0088.794] IsWindowUnicode (hWnd=0x201c8) returned 1 [0088.794] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0088.795] TranslateMessage (lpMsg=0x14edb0) returned 0 [0088.795] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0088.795] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0088.795] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0088.795] WaitMessage () returned 1 [0088.903] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0088.904] IsWindowUnicode (hWnd=0x201c8) returned 1 [0088.904] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0088.904] TranslateMessage (lpMsg=0x14edb0) returned 0 [0088.904] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0088.904] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0088.904] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0088.904] WaitMessage () returned 1 [0089.017] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.017] IsWindowUnicode (hWnd=0x201c8) returned 1 [0089.017] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.017] TranslateMessage (lpMsg=0x14edb0) returned 0 [0089.017] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0089.017] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0089.017] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0089.017] WaitMessage () returned 1 [0089.122] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.122] IsWindowUnicode (hWnd=0x201c8) returned 1 [0089.122] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.122] TranslateMessage (lpMsg=0x14edb0) returned 0 [0089.122] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0089.122] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0089.122] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0089.122] WaitMessage () returned 1 [0089.231] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.231] IsWindowUnicode (hWnd=0x201c8) returned 1 [0089.231] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.231] TranslateMessage (lpMsg=0x14edb0) returned 0 [0089.231] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0089.231] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0089.231] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0089.232] WaitMessage () returned 1 [0089.341] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.341] IsWindowUnicode (hWnd=0x201c8) returned 1 [0089.341] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.341] TranslateMessage (lpMsg=0x14edb0) returned 0 [0089.341] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0089.341] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0089.341] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0089.341] WaitMessage () returned 1 [0089.450] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.450] IsWindowUnicode (hWnd=0x201c8) returned 1 [0089.450] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.450] TranslateMessage (lpMsg=0x14edb0) returned 0 [0089.450] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0089.450] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0089.450] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0089.450] WaitMessage () returned 1 [0089.496] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.496] IsWindowUnicode (hWnd=0x301ee) returned 1 [0089.496] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.496] TranslateMessage (lpMsg=0x14edb0) returned 0 [0089.496] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0089.497] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0089.498] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0089.498] CoTaskMemFree (pv=0xa692f0) [0089.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0089.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0089.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0089.498] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0089.498] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0089.498] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e500) returned 1 [0089.498] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x274 [0089.498] GetFileType (hFile=0x274) returned 0x1 [0089.498] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e470) returned 1 [0089.498] GetFileType (hFile=0x274) returned 0x1 [0089.498] ReadFile (in: hFile=0x274, lpBuffer=0x22400e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x22400e0*, lpNumberOfBytesRead=0x14e5d8*=0x2, lpOverlapped=0x0) returned 1 [0089.499] ReadFile (in: hFile=0x274, lpBuffer=0x22400e0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x22400e0*, lpNumberOfBytesRead=0x14e5d8*=0x0, lpOverlapped=0x0) returned 1 [0089.499] CloseHandle (hObject=0x274) returned 1 [0089.500] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0089.500] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0089.500] CoTaskMemFree (pv=0xa692f0) [0089.500] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0089.500] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0089.500] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0089.500] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0089.500] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0089.501] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0089.501] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e4c0) returned 1 [0089.501] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x274 [0089.502] GetFileType (hFile=0x274) returned 0x1 [0089.502] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e430) returned 1 [0089.502] GetFileType (hFile=0x274) returned 0x1 [0089.502] WriteFile (in: hFile=0x274, lpBuffer=0x2243430*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x14e508, lpOverlapped=0x0 | out: lpBuffer=0x2243430*, lpNumberOfBytesWritten=0x14e508*=0x2, lpOverlapped=0x0) returned 1 [0089.503] CloseHandle (hObject=0x274) returned 1 [0089.504] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0089.504] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0089.504] GetSystemMetrics (nIndex=42) returned 0 [0089.504] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e600, nMaxCount=5 | out: lpString="4:40") returned 4 [0089.504] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e600) returned 0x4 [0089.504] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0089.504] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0089.504] GetSystemMetrics (nIndex=42) returned 0 [0089.505] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e5a0, nMaxCount=5 | out: lpString="4:40") returned 4 [0089.505] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e5a0) returned 0x4 [0089.505] SetWindowTextW (hWnd=0x201da, lpString="4:39") returned 1 [0089.505] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xc, wParam=0x0, lParam=0x2241154) returned 0x1 [0089.505] GetStockObject (i=5) returned 0x1900015 [0089.505] GetDlgItem (hDlg=0x401fa, nIDDlgItem=131546) returned 0x201da [0089.505] SendMessageW (hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0089.505] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0089.505] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0089.505] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0089.505] GetSystemMetrics (nIndex=42) returned 0 [0089.505] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e460, nMaxCount=5 | out: lpString="4:39") returned 4 [0089.505] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e460) returned 0x4 [0089.506] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0089.506] AdjustWindowRectEx (in: lpRect=0x14e478, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e478) returned 1 [0089.506] DrawTextExW (in: hdc=0x8010893, lpchText="4:39", cchText=4, lprc=0x14e3e8, format=0x2400, lpdtp=0x22446e8 | out: lpchText="4:39", lprc=0x14e3e8) returned 20 [0089.506] InvalidateRect (hWnd=0x201da, lpRect=0x0, bErase=1) returned 1 [0089.506] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0089.506] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0089.506] GetSystemMetrics (nIndex=42) returned 0 [0089.506] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14e3d0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0089.506] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14e3d0) returned 0xc [0089.506] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.506] IsWindowUnicode (hWnd=0x201da) returned 1 [0089.506] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.506] TranslateMessage (lpMsg=0x14edb0) returned 0 [0089.506] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0089.506] BeginPaint (in: hWnd=0x201da, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0xb010256 [0089.506] SelectPalette (hdc=0xb010256, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0089.506] CreateCompatibleDC (hdc=0xb010256) returned 0xffffffffa2010880 [0089.506] SelectObject (hdc=0xffffffffa2010880, h=0x29050250) returned 0x185000f [0089.507] GdipCreateFromHDC (hdc=0xffffffffa2010880, graphics=0x14e428) returned 0x0 [0089.507] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0089.507] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=40, height=20, combineMode=0x0) returned 0x0 [0089.507] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0089.507] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0089.507] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14e4b8) returned 0x0 [0089.507] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0089.507] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0089.507] LocalFree (hMem=0xa931f0) returned 0x0 [0089.507] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0089.507] GdipCreateRegion (region=0x14e450) returned 0x0 [0089.507] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0089.507] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0089.507] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0089.507] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0089.507] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0089.507] GetSystemMetrics (nIndex=42) returned 0 [0089.507] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:39") returned 4 [0089.507] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0089.507] GetClientRect (in: hWnd=0x201da, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0089.507] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0089.508] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0089.508] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0089.508] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0089.508] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0089.508] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0089.508] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0089.508] LocalFree (hMem=0xa931f0) returned 0x0 [0089.508] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0089.508] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0089.508] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0089.508] LocalFree (hMem=0xa931f0) returned 0x0 [0089.508] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0089.508] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0089.508] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0089.508] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0089.508] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0089.508] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0089.508] GetCurrentObject (hdc=0xffffffffa2010880, type=0x1) returned 0x1b00017 [0089.508] GetCurrentObject (hdc=0xffffffffa2010880, type=0x2) returned 0x1900010 [0089.508] GetCurrentObject (hdc=0xffffffffa2010880, type=0x7) returned 0x29050250 [0089.508] GetCurrentObject (hdc=0xffffffffa2010880, type=0x6) returned 0x18a002e [0089.508] SaveDC (hdc=0xffffffffa2010880) returned 1 [0089.509] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffe9040872 [0089.509] GetClipRgn (hdc=0xffffffffa2010880, hrgn=0xffffffffe9040872) returned 0 [0089.509] SelectClipRgn (hdc=0xffffffffa2010880, hrgn=0xffffffffc304086f) returned 2 [0089.509] DeleteObject (ho=0xffffffffe9040872) returned 1 [0089.509] DeleteObject (ho=0xffffffffc304086f) returned 1 [0089.509] OffsetViewportOrgEx (in: hdc=0xffffffffa2010880, x=0, y=0, lppt=0x2244de8 | out: lppt=0x2244de8) returned 1 [0089.509] GetNearestColor (hdc=0xffffffffa2010880, color=0xa0) returned 0xa0 [0089.509] CreateSolidBrush (color=0xa0) returned 0xffffffffa7100860 [0089.509] FillRect (hDC=0xffffffffa2010880, lprc=0x14e1e8, hbr=0xffffffffa7100860) returned 1 [0089.509] DeleteObject (ho=0xffffffffa7100860) returned 1 [0089.509] RestoreDC (hdc=0xffffffffa2010880, nSavedDC=-1) returned 1 [0089.509] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffa2010880) returned 0x0 [0089.509] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd320dbd) returned 0x0 [0089.509] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0089.509] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0089.509] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0089.509] GetSystemMetrics (nIndex=42) returned 0 [0089.509] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:39") returned 4 [0089.509] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0089.510] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0089.510] GetCurrentObject (hdc=0xffffffffa2010880, type=0x1) returned 0x1b00017 [0089.510] GetCurrentObject (hdc=0xffffffffa2010880, type=0x2) returned 0x1900010 [0089.510] GetCurrentObject (hdc=0xffffffffa2010880, type=0x7) returned 0x29050250 [0089.510] GetCurrentObject (hdc=0xffffffffa2010880, type=0x6) returned 0x18a002e [0089.510] SaveDC (hdc=0xffffffffa2010880) returned 1 [0089.510] GetNearestColor (hdc=0xffffffffa2010880, color=0xffffff) returned 0xffffff [0089.510] RestoreDC (hdc=0xffffffffa2010880, nSavedDC=-1) returned 1 [0089.510] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffa2010880) returned 0x0 [0089.510] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0089.510] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0089.510] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0089.510] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0089.510] GetCurrentObject (hdc=0xffffffffa2010880, type=0x1) returned 0x1b00017 [0089.510] GetCurrentObject (hdc=0xffffffffa2010880, type=0x2) returned 0x1900010 [0089.510] GetCurrentObject (hdc=0xffffffffa2010880, type=0x7) returned 0x29050250 [0089.511] GetCurrentObject (hdc=0xffffffffa2010880, type=0x6) returned 0x18a002e [0089.511] SaveDC (hdc=0xffffffffa2010880) returned 1 [0089.511] GetTextAlign (hdc=0xffffffffa2010880) returned 0x0 [0089.511] GetTextColor (hdc=0xffffffffa2010880) returned 0x0 [0089.511] SetTextColor (hdc=0xffffffffa2010880, color=0xffffff) returned 0x0 [0089.511] GetCurrentObject (hdc=0xffffffffa2010880, type=0x6) returned 0x18a002e [0089.511] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0089.511] SelectObject (hdc=0xffffffffa2010880, h=0x200a0899) returned 0x18a002e [0089.511] GetBkMode (hdc=0xffffffffa2010880) returned 2 [0089.511] SetBkMode (hdc=0xffffffffa2010880, mode=1) returned 2 [0089.511] DrawTextExW (in: hdc=0xffffffffa2010880, lpchText="4:39", cchText=4, lprc=0x14e1c8, format=0x0, lpdtp=0x2245678 | out: lpchText="4:39", lprc=0x14e1c8) returned 20 [0089.511] RestoreDC (hdc=0xffffffffa2010880, nSavedDC=-1) returned 1 [0089.511] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffa2010880) returned 0x0 [0089.511] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0089.511] BitBlt (hdc=0xb010256, x=0, y=0, cx=40, cy=20, hdcSrc=0xffffffffa2010880, x1=0, y1=0, rop=0xcc0020) returned 1 [0089.511] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffa2010880) returned 0x0 [0089.512] SelectPalette (hdc=0xb010256, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0089.512] SelectObject (hdc=0xffffffffa2010880, h=0x185000f) returned 0x29050250 [0089.512] DeleteDC (hdc=0xffffffffa2010880) returned 1 [0089.512] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0089.512] EndPaint (hWnd=0x201da, lpPaint=0x14e448) returned 1 [0089.512] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0089.512] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0089.512] WaitMessage () returned 1 [0089.559] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.559] IsWindowUnicode (hWnd=0x201c8) returned 1 [0089.559] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.559] TranslateMessage (lpMsg=0x14edb0) returned 0 [0089.559] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0089.559] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0089.559] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0089.559] WaitMessage () returned 1 [0089.576] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.576] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x28202d2) returned 0x1 [0089.576] IsWindowUnicode (hWnd=0x1020c) returned 1 [0089.576] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.576] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x28202d2) returned 0x1 [0089.576] SetCursor (hCursor=0x10003) returned 0x10003 [0089.576] TranslateMessage (lpMsg=0x14edb0) returned 0 [0089.576] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0089.576] GetKeyState (nVirtKey=1) returned 0 [0089.576] GetKeyState (nVirtKey=2) returned 0 [0089.576] GetKeyState (nVirtKey=4) returned 0 [0089.576] GetKeyState (nVirtKey=5) returned 0 [0089.576] GetKeyState (nVirtKey=6) returned 0 [0089.576] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0089.576] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0089.576] WaitMessage () returned 1 [0089.638] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.638] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x28202d2) returned 0x1 [0089.638] IsWindowUnicode (hWnd=0x1020c) returned 1 [0089.638] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.638] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x28202d2) returned 0x1 [0089.638] GetDlgItem (hDlg=0x401fa, nIDDlgItem=0) returned 0x0 [0089.638] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x210, wParam=0x201, lParam=0x1b5012b) returned 0x0 [0089.638] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x21, wParam=0x401fa, lParam=0x2010001) returned 0x1 [0089.638] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x21, wParam=0x401fa, lParam=0x2010001) returned 0x1 [0089.638] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0089.638] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x201ca, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0089.638] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0089.638] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401e4, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0089.638] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301a2, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0089.639] NtdllDefWindowProc_W (hWnd=0x40120, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0089.639] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x301d2, Msg=0x1c, wParam=0x1, lParam=0x0) returned 0x0 [0089.639] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x86, wParam=0x1, lParam=0x0) returned 0x1 [0089.639] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x2, lParam=0x0) returned 0x0 [0089.639] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x0, lParam=0x0) returned 0x0 [0089.639] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x7f, wParam=0x1, lParam=0x0) returned 0x0 [0089.640] GetFocus () returned 0x0 [0089.640] SetFocus (hWnd=0x1020c) returned 0x0 [0089.640] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x281, wParam=0x1, lParam=0xc000000f) returned 0x0 [0089.641] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0089.641] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x282, wParam=0x2, lParam=0x0) returned 0x0 [0089.641] GetKeyboardLayout (idThread=0x0) returned 0x4090409 [0089.641] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x7, wParam=0x0, lParam=0x0) returned 0x0 [0089.641] GetStockObject (i=5) returned 0x1900015 [0089.641] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x5 [0089.641] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0xd, wParam=0x6, lParam=0xa84460) returned 0x5 [0089.641] GetDlgItem (hDlg=0x401fa, nIDDlgItem=66060) returned 0x1020c [0089.641] SendMessageW (hWnd=0x1020c, Msg=0x202b, wParam=0x1020c, lParam=0x14dc40) returned 0x0 [0089.641] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x202b, wParam=0x1020c, lParam=0x14dc40) returned 0x0 [0089.641] InvalidateRect (hWnd=0x1020c, lpRect=0x0, bErase=0) returned 1 [0089.641] SetCursor (hCursor=0x10003) returned 0x10003 [0089.642] TranslateMessage (lpMsg=0x14edb0) returned 0 [0089.642] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0089.642] GetKeyState (nVirtKey=1) returned -127 [0089.642] GetKeyState (nVirtKey=2) returned 0 [0089.642] GetKeyState (nVirtKey=4) returned 0 [0089.642] GetKeyState (nVirtKey=5) returned 0 [0089.642] GetKeyState (nVirtKey=6) returned 0 [0089.642] IsWindowVisible (hWnd=0x1020c) returned 1 [0089.642] IsWindowEnabled (hWnd=0x1020c) returned 1 [0089.642] SetFocus (hWnd=0x1020c) returned 0x1020c [0089.642] GetFocus () returned 0x1020c [0089.642] GetFocus () returned 0x1020c [0089.642] GetFocus () returned 0x1020c [0089.642] GetKeyState (nVirtKey=1) returned -127 [0089.642] GetKeyState (nVirtKey=2) returned 0 [0089.642] GetKeyState (nVirtKey=4) returned 0 [0089.642] GetKeyState (nVirtKey=5) returned 0 [0089.642] GetKeyState (nVirtKey=6) returned 0 [0089.642] GetCapture () returned 0x0 [0089.642] SetCapture (hWnd=0x1020c) returned 0x0 [0089.642] GetKeyState (nVirtKey=1) returned -127 [0089.642] GetKeyState (nVirtKey=2) returned 0 [0089.642] GetKeyState (nVirtKey=4) returned 0 [0089.642] GetKeyState (nVirtKey=5) returned 0 [0089.642] GetKeyState (nVirtKey=6) returned 0 [0089.642] NotifyWinEvent (event=0x800a, hwnd=0x1020c, idObject=-4, idChild=0) [0089.642] InvalidateRect (hWnd=0x1020c, lpRect=0x14e6f0, bErase=0) returned 1 [0089.642] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.642] GetMessageA (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.642] TranslateMessage (lpMsg=0x14edb0) returned 0 [0089.642] DispatchMessageA (lpMsg=0x14edb0) returned 0x0 [0089.643] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.643] GetMessageA (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.643] TranslateMessage (lpMsg=0x14edb0) returned 0 [0089.643] DispatchMessageA (lpMsg=0x14edb0) returned 0x0 [0089.643] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.643] IsWindowUnicode (hWnd=0x1020c) returned 1 [0089.643] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.643] TranslateMessage (lpMsg=0x14edb0) returned 0 [0089.643] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0089.643] MapWindowPoints (in: hWndFrom=0x1020c, hWndTo=0x0, lpPoints=0x2245878, cPoints=0x1 | out: lpPoints=0x2245878) returned 41353803 [0089.643] NotifyWinEvent (event=0x800a, hwnd=0x1020c, idObject=-4, idChild=0) [0089.643] InvalidateRect (hWnd=0x1020c, lpRect=0x14e680, bErase=0) returned 1 [0089.643] UpdateWindow (hWnd=0x1020c) returned 1 [0089.643] BeginPaint (in: hWnd=0x1020c, lpPaint=0x14ddf8 | out: lpPaint=0x14ddf8) returned 0x5010830 [0089.643] SelectPalette (hdc=0x5010830, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0089.643] CreateCompatibleDC (hdc=0x5010830) returned 0xffffffffa9010880 [0089.643] SelectObject (hdc=0xffffffffa9010880, h=0x29050250) returned 0x185000f [0089.643] GdipCreateFromHDC (hdc=0xffffffffa9010880, graphics=0x14dd78) returned 0x0 [0089.643] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0089.643] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=408, height=23, combineMode=0x0) returned 0x0 [0089.643] GdipCreateMatrix (matrix=0x14dda0) returned 0x0 [0089.643] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0089.643] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14de08) returned 0x0 [0089.644] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0089.644] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0089.644] LocalFree (hMem=0xa931f0) returned 0x0 [0089.644] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0089.644] GdipCreateRegion (region=0x14dda0) returned 0x0 [0089.644] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0089.644] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14de00) returned 0x0 [0089.644] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14dea0) returned 0x0 [0089.644] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd300dbd) returned 0x0 [0089.644] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0089.644] GdipGetDC (graphics=0x1afd81d0, hdc=0x14db18) returned 0x0 [0089.644] GetCurrentObject (hdc=0xffffffffa9010880, type=0x1) returned 0x1b00017 [0089.644] GetCurrentObject (hdc=0xffffffffa9010880, type=0x2) returned 0x1900010 [0089.644] GetCurrentObject (hdc=0xffffffffa9010880, type=0x7) returned 0x29050250 [0089.644] GetCurrentObject (hdc=0xffffffffa9010880, type=0x6) returned 0x18a002e [0089.644] SaveDC (hdc=0xffffffffa9010880) returned 1 [0089.644] GetNearestColor (hdc=0xffffffffa9010880, color=0xa0) returned 0xa0 [0089.644] GetNearestColor (hdc=0xffffffffa9010880, color=0x35) returned 0x35 [0089.644] GetNearestColor (hdc=0xffffffffa9010880, color=0x0) returned 0x0 [0089.645] GetNearestColor (hdc=0xffffffffa9010880, color=0x4848e5) returned 0x4848e5 [0089.645] GetNearestColor (hdc=0xffffffffa9010880, color=0x0) returned 0x0 [0089.645] GetNearestColor (hdc=0xffffffffa9010880, color=0x5151ff) returned 0x5151ff [0089.645] GetNearestColor (hdc=0xffffffffa9010880, color=0x4848e5) returned 0x4848e5 [0089.645] GetNearestColor (hdc=0xffffffffa9010880, color=0xc0) returned 0xc0 [0089.645] GetNearestColor (hdc=0xffffffffa9010880, color=0x0) returned 0x0 [0089.645] RestoreDC (hdc=0xffffffffa9010880, nSavedDC=-1) returned 1 [0089.645] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffa9010880) returned 0x0 [0089.645] IsAppThemed () returned 0x1 [0089.645] GetThemeAppProperties () returned 0x3 [0089.645] GetThemeAppProperties () returned 0x3 [0089.645] IsAppThemed () returned 0x1 [0089.645] GetThemeAppProperties () returned 0x3 [0089.645] GetThemeAppProperties () returned 0x3 [0089.645] SelectObject (hdc=0x8010893, h=0x120a086d) returned 0x200a0899 [0089.645] DrawTextExW (in: hdc=0x8010893, lpchText="Check", cchText=5, lprc=0x14d788, format=0x2415, lpdtp=0x22463a0 | out: lpchText="Check", lprc=0x14d788) returned 13 [0089.645] IsAppThemed () returned 0x1 [0089.645] GetThemeAppProperties () returned 0x3 [0089.645] GetThemeAppProperties () returned 0x3 [0089.645] IsAppThemed () returned 0x1 [0089.646] GetThemeAppProperties () returned 0x3 [0089.646] GetThemeAppProperties () returned 0x3 [0089.646] IsAppThemed () returned 0x1 [0089.646] GetThemeAppProperties () returned 0x3 [0089.646] GetThemeAppProperties () returned 0x3 [0089.646] IsAppThemed () returned 0x1 [0089.646] GetThemeAppProperties () returned 0x3 [0089.646] GetThemeAppProperties () returned 0x3 [0089.646] IsThemePartDefined () returned 0x1 [0089.646] IsAppThemed () returned 0x1 [0089.646] GetThemeAppProperties () returned 0x3 [0089.646] GetThemeAppProperties () returned 0x3 [0089.646] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0089.646] IsAppThemed () returned 0x1 [0089.646] GetThemeAppProperties () returned 0x3 [0089.646] GetThemeAppProperties () returned 0x3 [0089.646] IsAppThemed () returned 0x1 [0089.646] GetThemeAppProperties () returned 0x3 [0089.646] GetThemeAppProperties () returned 0x3 [0089.646] IsThemePartDefined () returned 0x1 [0089.646] GdipCreateRegion (region=0x14d880) returned 0x0 [0089.646] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0089.646] GdipCreateMatrix (matrix=0x14d880) returned 0x0 [0089.646] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0089.646] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14d8e8) returned 0x0 [0089.646] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0089.646] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0089.646] LocalFree (hMem=0xa931f0) returned 0x0 [0089.646] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0089.646] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0089.647] LocalFree (hMem=0xa931f0) returned 0x0 [0089.647] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0089.647] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d950) returned 0x0 [0089.647] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d910) returned 0x0 [0089.647] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14d910) returned 0x0 [0089.647] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0089.647] GdipGetDC (graphics=0x1afd81d0, hdc=0x14d958) returned 0x0 [0089.647] GetCurrentObject (hdc=0xffffffffa9010880, type=0x1) returned 0x1b00017 [0089.647] GetCurrentObject (hdc=0xffffffffa9010880, type=0x2) returned 0x1900010 [0089.647] GetCurrentObject (hdc=0xffffffffa9010880, type=0x7) returned 0x29050250 [0089.647] GetCurrentObject (hdc=0xffffffffa9010880, type=0x6) returned 0x18a002e [0089.648] SaveDC (hdc=0xffffffffa9010880) returned 1 [0089.648] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffc404086f [0089.648] GetClipRgn (hdc=0xffffffffa9010880, hrgn=0xffffffffc404086f) returned 0 [0089.648] SelectClipRgn (hdc=0xffffffffa9010880, hrgn=0xffffffffee040872) returned 2 [0089.648] DeleteObject (ho=0xffffffffc404086f) returned 1 [0089.648] DeleteObject (ho=0xffffffffee040872) returned 1 [0089.648] OffsetViewportOrgEx (in: hdc=0xffffffffa9010880, x=0, y=0, lppt=0x2246d88 | out: lppt=0x2246d88) returned 1 [0089.648] DrawThemeParentBackground () returned 0x0 [0089.648] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14d508 | out: lpwndpl=0x14d508) returned 1 [0089.648] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d420 | out: lpRect=0x14d420) returned 1 [0089.648] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0089.648] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0089.648] GetSystemMetrics (nIndex=42) returned 0 [0089.648] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d180, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0089.648] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d180) returned 0xc [0089.648] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d208 | out: lpRect=0x14d208) returned 1 [0089.648] GetCurrentObject (hdc=0xffffffffa9010880, type=0x1) returned 0x1b00017 [0089.649] GetCurrentObject (hdc=0xffffffffa9010880, type=0x2) returned 0x1900010 [0089.649] GetCurrentObject (hdc=0xffffffffa9010880, type=0x7) returned 0x29050250 [0089.649] GetCurrentObject (hdc=0xffffffffa9010880, type=0x6) returned 0x18a002e [0089.649] SaveDC (hdc=0xffffffffa9010880) returned 2 [0089.649] GetNearestColor (hdc=0xffffffffa9010880, color=0xa0) returned 0xa0 [0089.649] CreateSolidBrush (color=0xa0) returned 0xffffffffa8100860 [0089.649] FillRect (hDC=0xffffffffa9010880, lprc=0x14cef8, hbr=0xffffffffa8100860) returned 1 [0089.649] DeleteObject (ho=0xffffffffa8100860) returned 1 [0089.649] RestoreDC (hdc=0xffffffffa9010880, nSavedDC=-1) returned 1 [0089.649] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0089.649] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0089.649] GetSystemMetrics (nIndex=42) returned 0 [0089.649] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d0b0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0089.649] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d0b0) returned 0xc [0089.649] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d138 | out: lpRect=0x14d138) returned 1 [0089.649] GetCurrentObject (hdc=0xffffffffa9010880, type=0x1) returned 0x1b00017 [0089.649] GetCurrentObject (hdc=0xffffffffa9010880, type=0x2) returned 0x1900010 [0089.649] GetCurrentObject (hdc=0xffffffffa9010880, type=0x7) returned 0x29050250 [0089.649] GetCurrentObject (hdc=0xffffffffa9010880, type=0x6) returned 0x18a002e [0089.650] SaveDC (hdc=0xffffffffa9010880) returned 2 [0089.650] GetNearestColor (hdc=0xffffffffa9010880, color=0xa0) returned 0xa0 [0089.650] CreateSolidBrush (color=0xa0) returned 0xffffffffa9100860 [0089.650] FillRect (hDC=0xffffffffa9010880, lprc=0x14ce28, hbr=0xffffffffa9100860) returned 1 [0089.650] DeleteObject (ho=0xffffffffa9100860) returned 1 [0089.650] RestoreDC (hdc=0xffffffffa9010880, nSavedDC=-1) returned 1 [0089.650] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0089.650] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0089.650] GetSystemMetrics (nIndex=42) returned 0 [0089.650] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d0b0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0089.650] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d0b0) returned 0xc [0089.650] RestoreDC (hdc=0xffffffffa9010880, nSavedDC=-1) returned 1 [0089.650] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffa9010880) returned 0x0 [0089.650] IsAppThemed () returned 0x1 [0089.650] GetThemeAppProperties () returned 0x3 [0089.650] GetThemeAppProperties () returned 0x3 [0089.650] IsAppThemed () returned 0x1 [0089.650] GetThemeAppProperties () returned 0x3 [0089.650] GetThemeAppProperties () returned 0x3 [0089.650] IsThemePartDefined () returned 0x1 [0089.650] GdipCreateRegion (region=0x14d820) returned 0x0 [0089.651] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0089.651] GdipCreateMatrix (matrix=0x14d820) returned 0x0 [0089.651] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0089.651] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14d888) returned 0x0 [0089.651] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0089.651] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0089.651] LocalFree (hMem=0xa931f0) returned 0x0 [0089.651] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0089.651] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0089.651] LocalFree (hMem=0xa931f0) returned 0x0 [0089.651] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0089.651] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d8f0) returned 0x0 [0089.651] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d8b0) returned 0x0 [0089.651] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14d8b0) returned 0x0 [0089.651] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0089.651] GdipGetDC (graphics=0x1afd81d0, hdc=0x14d8f8) returned 0x0 [0089.651] GetCurrentObject (hdc=0xffffffffa9010880, type=0x1) returned 0x1b00017 [0089.651] GetCurrentObject (hdc=0xffffffffa9010880, type=0x2) returned 0x1900010 [0089.651] GetCurrentObject (hdc=0xffffffffa9010880, type=0x7) returned 0x29050250 [0089.651] GetCurrentObject (hdc=0xffffffffa9010880, type=0x6) returned 0x18a002e [0089.651] SaveDC (hdc=0xffffffffa9010880) returned 1 [0089.652] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffef040872 [0089.652] GetClipRgn (hdc=0xffffffffa9010880, hrgn=0xffffffffef040872) returned 0 [0089.652] SelectClipRgn (hdc=0xffffffffa9010880, hrgn=0xffffffffc604086f) returned 2 [0089.652] DeleteObject (ho=0xffffffffef040872) returned 1 [0089.652] DeleteObject (ho=0xffffffffc604086f) returned 1 [0089.652] OffsetViewportOrgEx (in: hdc=0xffffffffa9010880, x=0, y=0, lppt=0x2247b90 | out: lppt=0x2247b90) returned 1 [0089.652] IsAppThemed () returned 0x1 [0089.652] GetThemeAppProperties () returned 0x3 [0089.652] GetThemeAppProperties () returned 0x3 [0089.652] DrawThemeBackground () returned 0x0 [0089.658] RestoreDC (hdc=0xffffffffa9010880, nSavedDC=-1) returned 1 [0089.658] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffa9010880) returned 0x0 [0089.658] GdipCreateRegion (region=0x14d810) returned 0x0 [0089.658] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0089.658] GdipCreateMatrix (matrix=0x14d810) returned 0x0 [0089.658] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0089.658] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14d878) returned 0x0 [0089.658] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0089.658] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0089.658] LocalFree (hMem=0xa931f0) returned 0x0 [0089.658] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0089.658] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0089.658] LocalFree (hMem=0xa931f0) returned 0x0 [0089.658] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0089.658] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d8e0) returned 0x0 [0089.659] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14d8a0) returned 0x0 [0089.659] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14d8a0) returned 0x0 [0089.659] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0089.659] GdipGetDC (graphics=0x1afd81d0, hdc=0x14d8e8) returned 0x0 [0089.659] GetCurrentObject (hdc=0xffffffffa9010880, type=0x1) returned 0x1b00017 [0089.659] GetCurrentObject (hdc=0xffffffffa9010880, type=0x2) returned 0x1900010 [0089.659] GetCurrentObject (hdc=0xffffffffa9010880, type=0x7) returned 0x29050250 [0089.659] GetCurrentObject (hdc=0xffffffffa9010880, type=0x6) returned 0x18a002e [0089.659] SaveDC (hdc=0xffffffffa9010880) returned 1 [0089.659] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffc704086f [0089.659] GetClipRgn (hdc=0xffffffffa9010880, hrgn=0xffffffffc704086f) returned 0 [0089.659] SelectClipRgn (hdc=0xffffffffa9010880, hrgn=0xfffffffff0040872) returned 2 [0089.659] DeleteObject (ho=0xffffffffc704086f) returned 1 [0089.659] DeleteObject (ho=0xfffffffff0040872) returned 1 [0089.659] OffsetViewportOrgEx (in: hdc=0xffffffffa9010880, x=0, y=0, lppt=0x2248068 | out: lppt=0x2248068) returned 1 [0089.659] IsAppThemed () returned 0x1 [0089.659] GetThemeAppProperties () returned 0x3 [0089.659] GetThemeAppProperties () returned 0x3 [0089.659] GetThemeBackgroundContentRect () returned 0x0 [0089.660] RestoreDC (hdc=0xffffffffa9010880, nSavedDC=-1) returned 1 [0089.660] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffa9010880) returned 0x0 [0089.660] IsAppThemed () returned 0x1 [0089.660] GetThemeAppProperties () returned 0x3 [0089.660] GetThemeAppProperties () returned 0x3 [0089.660] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14dac8) returned 0x0 [0089.660] GdipGetDC (graphics=0x1afd81d0, hdc=0x14daa8) returned 0x0 [0089.660] GetCurrentObject (hdc=0xffffffffa9010880, type=0x1) returned 0x1b00017 [0089.660] GetCurrentObject (hdc=0xffffffffa9010880, type=0x2) returned 0x1900010 [0089.660] GetCurrentObject (hdc=0xffffffffa9010880, type=0x7) returned 0x29050250 [0089.660] GetCurrentObject (hdc=0xffffffffa9010880, type=0x6) returned 0x18a002e [0089.660] SaveDC (hdc=0xffffffffa9010880) returned 1 [0089.660] GetTextAlign (hdc=0xffffffffa9010880) returned 0x0 [0089.660] GetTextColor (hdc=0xffffffffa9010880) returned 0x0 [0089.660] GetCurrentObject (hdc=0xffffffffa9010880, type=0x6) returned 0x18a002e [0089.660] GetObjectW (in: h=0x18a002e, c=92, pv=0x14d5e0 | out: pv=0x14d5e0) returned 92 [0089.660] SelectObject (hdc=0xffffffffa9010880, h=0x120a086d) returned 0x18a002e [0089.660] GetBkMode (hdc=0xffffffffa9010880) returned 2 [0089.660] SetBkMode (hdc=0xffffffffa9010880, mode=1) returned 2 [0089.661] DrawTextExW (in: hdc=0xffffffffa9010880, lpchText="Check", cchText=5, lprc=0x14d820, format=0x2415, lpdtp=0x2248648 | out: lpchText="Check", lprc=0x14d820) returned 13 [0089.661] DrawTextExW (in: hdc=0xffffffffa9010880, lpchText="Check", cchText=5, lprc=0x14da38, format=0x2015, lpdtp=0x2248648 | out: lpchText="Check", lprc=0x14da38) returned 13 [0089.661] RestoreDC (hdc=0xffffffffa9010880, nSavedDC=-1) returned 1 [0089.661] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffa9010880) returned 0x0 [0089.661] GetFocus () returned 0x1020c [0089.661] IsAppThemed () returned 0x1 [0089.661] GetThemeAppProperties () returned 0x3 [0089.661] GetThemeAppProperties () returned 0x3 [0089.661] GdipGetDC (graphics=0x1afd81d0, hdc=0x14ddb8) returned 0x0 [0089.661] BitBlt (hdc=0x5010830, x=0, y=0, cx=408, cy=23, hdcSrc=0xffffffffa9010880, x1=0, y1=0, rop=0xcc0020) returned 1 [0089.661] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffa9010880) returned 0x0 [0089.661] SelectPalette (hdc=0x5010830, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0089.661] SelectObject (hdc=0xffffffffa9010880, h=0x185000f) returned 0x29050250 [0089.661] DeleteDC (hdc=0xffffffffa9010880) returned 1 [0089.661] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0089.662] EndPaint (hWnd=0x1020c, lpPaint=0x14dd98) returned 1 [0089.662] MapWindowPoints (in: hWndFrom=0x1020c, hWndTo=0x0, lpPoints=0x22487b0, cPoints=0x1 | out: lpPoints=0x22487b0) returned 41353803 [0089.662] WindowFromPoint (Point=0x282000002d2) returned 0x1020c [0089.662] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x28202d2) returned 0x1 [0089.662] NotifyWinEvent (event=0x800a, hwnd=0x1020c, idObject=-4, idChild=0) [0089.662] NotifyWinEvent (event=0x800c, hwnd=0x1020c, idObject=-4, idChild=0) [0089.662] SetWindowPos (hWnd=0x10214, hWndInsertAfter=0x0, X=0, Y=0, cx=0, cy=0, uFlags=0x57) returned 1 [0089.662] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x10214, Msg=0x46, wParam=0x0, lParam=0x14e450) returned 0x0 [0089.662] GetCapture () returned 0x1020c [0089.662] ReleaseCapture () returned 1 [0089.662] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x215, wParam=0x0, lParam=0x0) returned 0x0 [0089.662] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.662] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x28202d2) returned 0x1 [0089.662] IsWindowUnicode (hWnd=0x1020c) returned 1 [0089.662] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.662] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x28202d2) returned 0x1 [0089.663] SetCursor (hCursor=0x10003) returned 0x10003 [0089.663] TranslateMessage (lpMsg=0x14edb0) returned 0 [0089.663] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0089.663] GetKeyState (nVirtKey=1) returned 1 [0089.663] GetKeyState (nVirtKey=2) returned 0 [0089.663] GetKeyState (nVirtKey=4) returned 0 [0089.663] GetKeyState (nVirtKey=5) returned 0 [0089.663] GetKeyState (nVirtKey=6) returned 0 [0089.663] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0089.663] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0089.663] WaitMessage () returned 1 [0089.668] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.668] IsWindowUnicode (hWnd=0x201c8) returned 1 [0089.668] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.668] TranslateMessage (lpMsg=0x14edb0) returned 0 [0089.668] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0089.668] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0089.668] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0089.668] WaitMessage () returned 1 [0089.746] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.746] IsWindowUnicode (hWnd=0x201ec) returned 1 [0089.746] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.746] TranslateMessage (lpMsg=0x14edb0) returned 0 [0089.746] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0089.746] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0089.746] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0089.746] WaitMessage () returned 1 [0089.777] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.777] IsWindowUnicode (hWnd=0x201c8) returned 1 [0089.777] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.777] TranslateMessage (lpMsg=0x14edb0) returned 0 [0089.778] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0089.778] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0089.778] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0089.778] WaitMessage () returned 1 [0089.886] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.886] IsWindowUnicode (hWnd=0x201c8) returned 1 [0089.886] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.886] TranslateMessage (lpMsg=0x14edb0) returned 0 [0089.886] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0089.886] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0089.887] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0089.887] WaitMessage () returned 1 [0089.949] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.949] IsWindowUnicode (hWnd=0x201e6) returned 1 [0089.949] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.949] TranslateMessage (lpMsg=0x14edb0) returned 0 [0089.949] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0089.949] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0089.949] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0089.949] WaitMessage () returned 1 [0089.996] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.996] IsWindowUnicode (hWnd=0x201c8) returned 1 [0089.996] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0089.996] TranslateMessage (lpMsg=0x14edb0) returned 0 [0089.996] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0089.996] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0089.996] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0089.996] WaitMessage () returned 1 [0090.105] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0090.105] IsWindowUnicode (hWnd=0x201c8) returned 1 [0090.105] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0090.105] TranslateMessage (lpMsg=0x14edb0) returned 0 [0090.105] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0090.105] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0090.105] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0090.105] WaitMessage () returned 1 [0090.214] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0090.215] IsWindowUnicode (hWnd=0x201c8) returned 1 [0090.215] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0090.215] TranslateMessage (lpMsg=0x14edb0) returned 0 [0090.215] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0090.215] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0090.215] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0090.215] WaitMessage () returned 1 [0090.232] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0090.232] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x84, wParam=0x0, lParam=0x2000311) returned 0x1 [0090.232] IsWindowUnicode (hWnd=0x401fa) returned 1 [0090.232] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0090.232] TranslateMessage (lpMsg=0x14edb0) returned 0 [0090.232] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0090.232] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0090.232] InvalidateRect (hWnd=0x1020c, lpRect=0x0, bErase=0) returned 1 [0090.232] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0090.232] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x84, wParam=0x0, lParam=0x2000311) returned 0x1 [0090.232] IsWindowUnicode (hWnd=0x401fa) returned 1 [0090.232] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0090.232] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x84, wParam=0x0, lParam=0x2000311) returned 0x1 [0090.232] SetCursor (hCursor=0x10003) returned 0x10003 [0090.232] TranslateMessage (lpMsg=0x14edb0) returned 0 [0090.232] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0090.232] _TrackMouseEvent (in: lpEventTrack=0x218fcb8 | out: lpEventTrack=0x218fcb8) returned 1 [0090.232] SendMessageW (hWnd=0x401fa, Msg=0xc12f, wParam=0x0, lParam=0x0) returned 0x0 [0090.232] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xc12f, wParam=0x0, lParam=0x0) returned 0x0 [0090.232] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x200, wParam=0x0, lParam=0x133016a) returned 0x0 [0090.232] GetKeyState (nVirtKey=1) returned 1 [0090.233] GetKeyState (nVirtKey=2) returned 0 [0090.233] GetKeyState (nVirtKey=4) returned 0 [0090.233] GetKeyState (nVirtKey=5) returned 0 [0090.233] GetKeyState (nVirtKey=6) returned 0 [0090.233] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0090.233] IsWindowUnicode (hWnd=0x1020c) returned 1 [0090.233] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0090.233] TranslateMessage (lpMsg=0x14edb0) returned 0 [0090.233] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0090.233] BeginPaint (in: hWnd=0x1020c, lpPaint=0x14e478 | out: lpPaint=0x14e478) returned 0x5010830 [0090.233] SelectPalette (hdc=0x5010830, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0090.233] CreateCompatibleDC (hdc=0x5010830) returned 0xffffffffac010880 [0090.233] SelectObject (hdc=0xffffffffac010880, h=0x29050250) returned 0x185000f [0090.233] GdipCreateFromHDC (hdc=0xffffffffac010880, graphics=0x14e3f8) returned 0x0 [0090.233] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0090.233] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=408, height=23, combineMode=0x0) returned 0x0 [0090.233] GdipCreateMatrix (matrix=0x14e420) returned 0x0 [0090.233] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0090.233] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14e488) returned 0x0 [0090.233] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0090.233] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0090.234] LocalFree (hMem=0xa931f0) returned 0x0 [0090.234] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0090.234] GdipCreateRegion (region=0x14e420) returned 0x0 [0090.234] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0090.234] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e480) returned 0x0 [0090.234] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e520) returned 0x0 [0090.234] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd2e0dbd) returned 0x0 [0090.234] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0090.234] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e198) returned 0x0 [0090.234] GetCurrentObject (hdc=0xffffffffac010880, type=0x1) returned 0x1b00017 [0090.234] GetCurrentObject (hdc=0xffffffffac010880, type=0x2) returned 0x1900010 [0090.234] GetCurrentObject (hdc=0xffffffffac010880, type=0x7) returned 0x29050250 [0090.234] GetCurrentObject (hdc=0xffffffffac010880, type=0x6) returned 0x18a002e [0090.234] SaveDC (hdc=0xffffffffac010880) returned 1 [0090.234] GetNearestColor (hdc=0xffffffffac010880, color=0xa0) returned 0xa0 [0090.234] GetNearestColor (hdc=0xffffffffac010880, color=0x35) returned 0x35 [0090.234] GetNearestColor (hdc=0xffffffffac010880, color=0x0) returned 0x0 [0090.234] GetNearestColor (hdc=0xffffffffac010880, color=0x4848e5) returned 0x4848e5 [0090.234] GetNearestColor (hdc=0xffffffffac010880, color=0x0) returned 0x0 [0090.235] GetNearestColor (hdc=0xffffffffac010880, color=0x5151ff) returned 0x5151ff [0090.235] GetNearestColor (hdc=0xffffffffac010880, color=0x4848e5) returned 0x4848e5 [0090.235] GetNearestColor (hdc=0xffffffffac010880, color=0xc0) returned 0xc0 [0090.235] GetNearestColor (hdc=0xffffffffac010880, color=0x0) returned 0x0 [0090.235] RestoreDC (hdc=0xffffffffac010880, nSavedDC=-1) returned 1 [0090.235] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffac010880) returned 0x0 [0090.235] IsAppThemed () returned 0x1 [0090.235] GetThemeAppProperties () returned 0x3 [0090.235] GetThemeAppProperties () returned 0x3 [0090.235] IsAppThemed () returned 0x1 [0090.235] GetThemeAppProperties () returned 0x3 [0090.235] GetThemeAppProperties () returned 0x3 [0090.235] DrawTextExW (in: hdc=0x8010893, lpchText="Check", cchText=5, lprc=0x14de08, format=0x2415, lpdtp=0x2249510 | out: lpchText="Check", lprc=0x14de08) returned 13 [0090.235] IsAppThemed () returned 0x1 [0090.235] GetThemeAppProperties () returned 0x3 [0090.235] GetThemeAppProperties () returned 0x3 [0090.235] IsAppThemed () returned 0x1 [0090.235] GetThemeAppProperties () returned 0x3 [0090.235] GetThemeAppProperties () returned 0x3 [0090.235] GetFocus () returned 0x1020c [0090.235] IsAppThemed () returned 0x1 [0090.235] GetThemeAppProperties () returned 0x3 [0090.235] GetThemeAppProperties () returned 0x3 [0090.235] IsAppThemed () returned 0x1 [0090.235] GetThemeAppProperties () returned 0x3 [0090.235] GetThemeAppProperties () returned 0x3 [0090.235] IsThemePartDefined () returned 0x1 [0090.236] IsAppThemed () returned 0x1 [0090.236] GetThemeAppProperties () returned 0x3 [0090.236] GetThemeAppProperties () returned 0x3 [0090.236] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0090.236] IsAppThemed () returned 0x1 [0090.236] GetThemeAppProperties () returned 0x3 [0090.236] GetThemeAppProperties () returned 0x3 [0090.236] IsAppThemed () returned 0x1 [0090.236] GetThemeAppProperties () returned 0x3 [0090.236] GetThemeAppProperties () returned 0x3 [0090.236] IsThemePartDefined () returned 0x1 [0090.236] GdipCreateRegion (region=0x14df00) returned 0x0 [0090.236] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0090.236] GdipCreateMatrix (matrix=0x14df00) returned 0x0 [0090.236] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0090.236] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14df68) returned 0x0 [0090.236] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0090.236] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0090.236] LocalFree (hMem=0xa931f0) returned 0x0 [0090.236] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0090.236] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0090.236] LocalFree (hMem=0xa931f0) returned 0x0 [0090.236] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0090.236] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14dfd0) returned 0x0 [0090.236] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df90) returned 0x0 [0090.236] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df90) returned 0x0 [0090.237] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0090.237] GdipGetDC (graphics=0x1afd81d0, hdc=0x14dfd8) returned 0x0 [0090.237] GetCurrentObject (hdc=0xffffffffac010880, type=0x1) returned 0x1b00017 [0090.237] GetCurrentObject (hdc=0xffffffffac010880, type=0x2) returned 0x1900010 [0090.237] GetCurrentObject (hdc=0xffffffffac010880, type=0x7) returned 0x29050250 [0090.237] GetCurrentObject (hdc=0xffffffffac010880, type=0x6) returned 0x18a002e [0090.237] SaveDC (hdc=0xffffffffac010880) returned 1 [0090.237] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfffffffff1040872 [0090.237] GetClipRgn (hdc=0xffffffffac010880, hrgn=0xfffffffff1040872) returned 0 [0090.237] SelectClipRgn (hdc=0xffffffffac010880, hrgn=0xffffffffcb04086f) returned 2 [0090.237] DeleteObject (ho=0xfffffffff1040872) returned 1 [0090.237] DeleteObject (ho=0xffffffffcb04086f) returned 1 [0090.237] OffsetViewportOrgEx (in: hdc=0xffffffffac010880, x=0, y=0, lppt=0x2249ef8 | out: lppt=0x2249ef8) returned 1 [0090.237] DrawThemeParentBackground () returned 0x0 [0090.237] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14db88 | out: lpwndpl=0x14db88) returned 1 [0090.237] GetClientRect (in: hWnd=0x401fa, lpRect=0x14daa0 | out: lpRect=0x14daa0) returned 1 [0090.237] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0090.237] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0090.237] GetSystemMetrics (nIndex=42) returned 0 [0090.237] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d800, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0090.237] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d800) returned 0xc [0090.238] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d888 | out: lpRect=0x14d888) returned 1 [0090.238] GetCurrentObject (hdc=0xffffffffac010880, type=0x1) returned 0x1b00017 [0090.238] GetCurrentObject (hdc=0xffffffffac010880, type=0x2) returned 0x1900010 [0090.238] GetCurrentObject (hdc=0xffffffffac010880, type=0x7) returned 0x29050250 [0090.238] GetCurrentObject (hdc=0xffffffffac010880, type=0x6) returned 0x18a002e [0090.238] SaveDC (hdc=0xffffffffac010880) returned 2 [0090.238] GetNearestColor (hdc=0xffffffffac010880, color=0xa0) returned 0xa0 [0090.238] CreateSolidBrush (color=0xa0) returned 0xffffffffaa100860 [0090.238] FillRect (hDC=0xffffffffac010880, lprc=0x14d578, hbr=0xffffffffaa100860) returned 1 [0090.238] DeleteObject (ho=0xffffffffaa100860) returned 1 [0090.238] RestoreDC (hdc=0xffffffffac010880, nSavedDC=-1) returned 1 [0090.238] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0090.238] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0090.238] GetSystemMetrics (nIndex=42) returned 0 [0090.238] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0090.238] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0090.238] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d7b8 | out: lpRect=0x14d7b8) returned 1 [0090.238] GetCurrentObject (hdc=0xffffffffac010880, type=0x1) returned 0x1b00017 [0090.238] GetCurrentObject (hdc=0xffffffffac010880, type=0x2) returned 0x1900010 [0090.239] GetCurrentObject (hdc=0xffffffffac010880, type=0x7) returned 0x29050250 [0090.239] GetCurrentObject (hdc=0xffffffffac010880, type=0x6) returned 0x18a002e [0090.239] SaveDC (hdc=0xffffffffac010880) returned 2 [0090.239] GetNearestColor (hdc=0xffffffffac010880, color=0xa0) returned 0xa0 [0090.239] CreateSolidBrush (color=0xa0) returned 0xffffffffab100860 [0090.239] FillRect (hDC=0xffffffffac010880, lprc=0x14d4a8, hbr=0xffffffffab100860) returned 1 [0090.239] DeleteObject (ho=0xffffffffab100860) returned 1 [0090.239] RestoreDC (hdc=0xffffffffac010880, nSavedDC=-1) returned 1 [0090.239] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0090.239] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0090.239] GetSystemMetrics (nIndex=42) returned 0 [0090.239] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0090.239] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0090.239] RestoreDC (hdc=0xffffffffac010880, nSavedDC=-1) returned 1 [0090.239] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffac010880) returned 0x0 [0090.239] IsAppThemed () returned 0x1 [0090.239] GetThemeAppProperties () returned 0x3 [0090.239] GetThemeAppProperties () returned 0x3 [0090.239] IsAppThemed () returned 0x1 [0090.239] GetThemeAppProperties () returned 0x3 [0090.239] GetThemeAppProperties () returned 0x3 [0090.239] IsThemePartDefined () returned 0x1 [0090.240] GdipCreateRegion (region=0x14dea0) returned 0x0 [0090.240] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0090.240] GdipCreateMatrix (matrix=0x14dea0) returned 0x0 [0090.240] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0090.240] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14df08) returned 0x0 [0090.240] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0090.240] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0090.240] LocalFree (hMem=0xa931f0) returned 0x0 [0090.240] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0090.240] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0090.240] LocalFree (hMem=0xa931f0) returned 0x0 [0090.240] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0090.240] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df70) returned 0x0 [0090.240] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df30) returned 0x0 [0090.240] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df30) returned 0x0 [0090.240] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0090.240] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df78) returned 0x0 [0090.240] GetCurrentObject (hdc=0xffffffffac010880, type=0x1) returned 0x1b00017 [0090.240] GetCurrentObject (hdc=0xffffffffac010880, type=0x2) returned 0x1900010 [0090.240] GetCurrentObject (hdc=0xffffffffac010880, type=0x7) returned 0x29050250 [0090.240] GetCurrentObject (hdc=0xffffffffac010880, type=0x6) returned 0x18a002e [0090.240] SaveDC (hdc=0xffffffffac010880) returned 1 [0090.240] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffcc04086f [0090.240] GetClipRgn (hdc=0xffffffffac010880, hrgn=0xffffffffcc04086f) returned 0 [0090.241] SelectClipRgn (hdc=0xffffffffac010880, hrgn=0xfffffffff3040872) returned 2 [0090.241] DeleteObject (ho=0xffffffffcc04086f) returned 1 [0090.241] DeleteObject (ho=0xfffffffff3040872) returned 1 [0090.241] OffsetViewportOrgEx (in: hdc=0xffffffffac010880, x=0, y=0, lppt=0x224ad00 | out: lppt=0x224ad00) returned 1 [0090.241] IsAppThemed () returned 0x1 [0090.241] GetThemeAppProperties () returned 0x3 [0090.241] GetThemeAppProperties () returned 0x3 [0090.241] DrawThemeBackground () returned 0x0 [0090.241] RestoreDC (hdc=0xffffffffac010880, nSavedDC=-1) returned 1 [0090.241] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffac010880) returned 0x0 [0090.241] GdipCreateRegion (region=0x14de90) returned 0x0 [0090.241] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0090.241] GdipCreateMatrix (matrix=0x14de90) returned 0x0 [0090.241] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0090.241] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14def8) returned 0x0 [0090.241] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0090.241] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0090.241] LocalFree (hMem=0xa931f0) returned 0x0 [0090.241] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0090.241] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0090.241] LocalFree (hMem=0xa931f0) returned 0x0 [0090.241] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0090.241] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df60) returned 0x0 [0090.241] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df20) returned 0x0 [0090.241] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df20) returned 0x0 [0090.242] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0090.242] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df68) returned 0x0 [0090.242] GetCurrentObject (hdc=0xffffffffac010880, type=0x1) returned 0x1b00017 [0090.242] GetCurrentObject (hdc=0xffffffffac010880, type=0x2) returned 0x1900010 [0090.242] GetCurrentObject (hdc=0xffffffffac010880, type=0x7) returned 0x29050250 [0090.242] GetCurrentObject (hdc=0xffffffffac010880, type=0x6) returned 0x18a002e [0090.242] SaveDC (hdc=0xffffffffac010880) returned 1 [0090.242] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfffffffff4040872 [0090.242] GetClipRgn (hdc=0xffffffffac010880, hrgn=0xfffffffff4040872) returned 0 [0090.242] SelectClipRgn (hdc=0xffffffffac010880, hrgn=0xffffffffcd04086f) returned 2 [0090.242] DeleteObject (ho=0xfffffffff4040872) returned 1 [0090.242] DeleteObject (ho=0xffffffffcd04086f) returned 1 [0090.242] OffsetViewportOrgEx (in: hdc=0xffffffffac010880, x=0, y=0, lppt=0x224b1d8 | out: lppt=0x224b1d8) returned 1 [0090.242] IsAppThemed () returned 0x1 [0090.242] GetThemeAppProperties () returned 0x3 [0090.242] GetThemeAppProperties () returned 0x3 [0090.242] GetThemeBackgroundContentRect () returned 0x0 [0090.242] RestoreDC (hdc=0xffffffffac010880, nSavedDC=-1) returned 1 [0090.242] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffac010880) returned 0x0 [0090.242] IsAppThemed () returned 0x1 [0090.242] GetThemeAppProperties () returned 0x3 [0090.242] GetThemeAppProperties () returned 0x3 [0090.242] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e148) returned 0x0 [0090.242] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e128) returned 0x0 [0090.242] GetCurrentObject (hdc=0xffffffffac010880, type=0x1) returned 0x1b00017 [0090.242] GetCurrentObject (hdc=0xffffffffac010880, type=0x2) returned 0x1900010 [0090.243] GetCurrentObject (hdc=0xffffffffac010880, type=0x7) returned 0x29050250 [0090.243] GetCurrentObject (hdc=0xffffffffac010880, type=0x6) returned 0x18a002e [0090.243] SaveDC (hdc=0xffffffffac010880) returned 1 [0090.243] GetTextAlign (hdc=0xffffffffac010880) returned 0x0 [0090.243] GetTextColor (hdc=0xffffffffac010880) returned 0x0 [0090.243] GetCurrentObject (hdc=0xffffffffac010880, type=0x6) returned 0x18a002e [0090.243] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dc60 | out: pv=0x14dc60) returned 92 [0090.243] SelectObject (hdc=0xffffffffac010880, h=0x120a086d) returned 0x18a002e [0090.243] GetBkMode (hdc=0xffffffffac010880) returned 2 [0090.243] SetBkMode (hdc=0xffffffffac010880, mode=1) returned 2 [0090.243] DrawTextExW (in: hdc=0xffffffffac010880, lpchText="Check", cchText=5, lprc=0x14dea0, format=0x2415, lpdtp=0x224b7b8 | out: lpchText="Check", lprc=0x14dea0) returned 13 [0090.243] DrawTextExW (in: hdc=0xffffffffac010880, lpchText="Check", cchText=5, lprc=0x14e0b8, format=0x2015, lpdtp=0x224b7b8 | out: lpchText="Check", lprc=0x14e0b8) returned 13 [0090.243] RestoreDC (hdc=0xffffffffac010880, nSavedDC=-1) returned 1 [0090.243] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffac010880) returned 0x0 [0090.243] GetFocus () returned 0x1020c [0090.243] IsAppThemed () returned 0x1 [0090.243] GetThemeAppProperties () returned 0x3 [0090.244] GetThemeAppProperties () returned 0x3 [0090.244] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e438) returned 0x0 [0090.244] BitBlt (hdc=0x5010830, x=0, y=0, cx=408, cy=23, hdcSrc=0xffffffffac010880, x1=0, y1=0, rop=0xcc0020) returned 1 [0090.244] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffac010880) returned 0x0 [0090.244] SelectPalette (hdc=0x5010830, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0090.244] SelectObject (hdc=0xffffffffac010880, h=0x185000f) returned 0x29050250 [0090.244] DeleteDC (hdc=0xffffffffac010880) returned 1 [0090.244] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0090.244] EndPaint (hWnd=0x1020c, lpPaint=0x14e418) returned 1 [0090.244] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0090.244] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0090.244] WaitMessage () returned 1 [0090.323] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0090.323] IsWindowUnicode (hWnd=0x201c8) returned 1 [0090.323] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0090.323] TranslateMessage (lpMsg=0x14edb0) returned 0 [0090.323] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0090.323] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0090.323] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0090.323] WaitMessage () returned 1 [0090.339] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0090.339] IsWindowUnicode (hWnd=0x401fa) returned 1 [0090.339] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0090.339] TranslateMessage (lpMsg=0x14edb0) returned 0 [0090.339] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0090.339] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0090.339] IsWindowUnicode (hWnd=0x401fa) returned 1 [0090.339] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0090.339] TranslateMessage (lpMsg=0x14edb0) returned 0 [0090.339] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0090.339] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x2a1, wParam=0x0, lParam=0x133016a) returned 0x0 [0090.339] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0090.339] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0090.339] WaitMessage () returned 1 [0090.432] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0090.432] IsWindowUnicode (hWnd=0x201c8) returned 1 [0090.432] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0090.433] TranslateMessage (lpMsg=0x14edb0) returned 0 [0090.433] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0090.433] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0090.433] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0090.433] WaitMessage () returned 1 [0090.510] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0090.510] IsWindowUnicode (hWnd=0x301ee) returned 1 [0090.510] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0090.510] TranslateMessage (lpMsg=0x14edb0) returned 0 [0090.510] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0090.511] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0090.511] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0090.511] CoTaskMemFree (pv=0xa692f0) [0090.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0090.511] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0090.511] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0090.511] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0090.512] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0090.512] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e500) returned 1 [0090.512] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x274 [0090.512] GetFileType (hFile=0x274) returned 0x1 [0090.512] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e470) returned 1 [0090.512] GetFileType (hFile=0x274) returned 0x1 [0090.512] ReadFile (in: hFile=0x274, lpBuffer=0x224d4f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x224d4f8*, lpNumberOfBytesRead=0x14e5d8*=0x2, lpOverlapped=0x0) returned 1 [0090.512] ReadFile (in: hFile=0x274, lpBuffer=0x224d4f8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x224d4f8*, lpNumberOfBytesRead=0x14e5d8*=0x0, lpOverlapped=0x0) returned 1 [0090.512] CloseHandle (hObject=0x274) returned 1 [0090.513] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0090.513] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0090.513] CoTaskMemFree (pv=0xa692f0) [0090.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0090.513] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0090.513] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0090.513] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0090.513] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0090.514] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0090.514] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e4c0) returned 1 [0090.514] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x274 [0090.514] GetFileType (hFile=0x274) returned 0x1 [0090.514] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e430) returned 1 [0090.514] GetFileType (hFile=0x274) returned 0x1 [0090.515] WriteFile (in: hFile=0x274, lpBuffer=0x2250848*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x14e508, lpOverlapped=0x0 | out: lpBuffer=0x2250848*, lpNumberOfBytesWritten=0x14e508*=0x2, lpOverlapped=0x0) returned 1 [0090.515] CloseHandle (hObject=0x274) returned 1 [0090.516] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0090.516] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0090.516] GetSystemMetrics (nIndex=42) returned 0 [0090.516] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e600, nMaxCount=5 | out: lpString="4:39") returned 4 [0090.516] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e600) returned 0x4 [0090.516] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0090.516] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0090.516] GetSystemMetrics (nIndex=42) returned 0 [0090.516] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e5a0, nMaxCount=5 | out: lpString="4:39") returned 4 [0090.516] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e5a0) returned 0x4 [0090.516] SetWindowTextW (hWnd=0x201da, lpString="4:38") returned 1 [0090.516] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xc, wParam=0x0, lParam=0x224e56c) returned 0x1 [0090.516] GetStockObject (i=5) returned 0x1900015 [0090.517] GetDlgItem (hDlg=0x401fa, nIDDlgItem=131546) returned 0x201da [0090.517] SendMessageW (hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0090.517] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0090.517] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0090.517] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0090.517] GetSystemMetrics (nIndex=42) returned 0 [0090.517] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e460, nMaxCount=5 | out: lpString="4:38") returned 4 [0090.517] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e460) returned 0x4 [0090.517] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0090.517] AdjustWindowRectEx (in: lpRect=0x14e478, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e478) returned 1 [0090.517] SelectObject (hdc=0x8010893, h=0x200a0899) returned 0x120a086d [0090.517] DrawTextExW (in: hdc=0x8010893, lpchText="4:38", cchText=4, lprc=0x14e3e8, format=0x2400, lpdtp=0x2251b00 | out: lpchText="4:38", lprc=0x14e3e8) returned 20 [0090.517] InvalidateRect (hWnd=0x201da, lpRect=0x0, bErase=1) returned 1 [0090.517] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0090.517] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0090.517] GetSystemMetrics (nIndex=42) returned 0 [0090.517] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14e3d0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0090.517] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14e3d0) returned 0xc [0090.518] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0090.518] IsWindowUnicode (hWnd=0x201da) returned 1 [0090.518] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0090.518] TranslateMessage (lpMsg=0x14edb0) returned 0 [0090.518] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0090.518] BeginPaint (in: hWnd=0x201da, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0x5010825 [0090.518] SelectPalette (hdc=0x5010825, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0090.518] CreateCompatibleDC (hdc=0x5010825) returned 0xffffffffae010880 [0090.518] SelectObject (hdc=0xffffffffae010880, h=0x29050250) returned 0x185000f [0090.518] GdipCreateFromHDC (hdc=0xffffffffae010880, graphics=0x14e428) returned 0x0 [0090.518] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0090.518] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=40, height=20, combineMode=0x0) returned 0x0 [0090.518] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0090.518] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0090.518] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14e4b8) returned 0x0 [0090.518] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0090.518] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0090.518] LocalFree (hMem=0xa931f0) returned 0x0 [0090.518] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0090.518] GdipCreateRegion (region=0x14e450) returned 0x0 [0090.518] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0090.519] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0090.519] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0090.519] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0090.519] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0090.519] GetSystemMetrics (nIndex=42) returned 0 [0090.519] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:38") returned 4 [0090.519] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0090.519] GetClientRect (in: hWnd=0x201da, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0090.519] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0090.519] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0090.519] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0090.519] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0090.519] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0090.519] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0090.519] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0090.519] LocalFree (hMem=0xa931f0) returned 0x0 [0090.519] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0090.519] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0090.519] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0090.519] LocalFree (hMem=0xa931f0) returned 0x0 [0090.519] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0090.519] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0090.519] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0090.519] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0090.519] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0090.519] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0090.519] GetCurrentObject (hdc=0xffffffffae010880, type=0x1) returned 0x1b00017 [0090.520] GetCurrentObject (hdc=0xffffffffae010880, type=0x2) returned 0x1900010 [0090.520] GetCurrentObject (hdc=0xffffffffae010880, type=0x7) returned 0x29050250 [0090.520] GetCurrentObject (hdc=0xffffffffae010880, type=0x6) returned 0x18a002e [0090.520] SaveDC (hdc=0xffffffffae010880) returned 1 [0090.520] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffce04086f [0090.520] GetClipRgn (hdc=0xffffffffae010880, hrgn=0xffffffffce04086f) returned 0 [0090.520] SelectClipRgn (hdc=0xffffffffae010880, hrgn=0xfffffffff8040872) returned 2 [0090.520] DeleteObject (ho=0xffffffffce04086f) returned 1 [0090.520] DeleteObject (ho=0xfffffffff8040872) returned 1 [0090.520] OffsetViewportOrgEx (in: hdc=0xffffffffae010880, x=0, y=0, lppt=0x2252200 | out: lppt=0x2252200) returned 1 [0090.520] GetNearestColor (hdc=0xffffffffae010880, color=0xa0) returned 0xa0 [0090.520] CreateSolidBrush (color=0xa0) returned 0xffffffffac100860 [0090.520] FillRect (hDC=0xffffffffae010880, lprc=0x14e1e8, hbr=0xffffffffac100860) returned 1 [0090.520] DeleteObject (ho=0xffffffffac100860) returned 1 [0090.520] RestoreDC (hdc=0xffffffffae010880, nSavedDC=-1) returned 1 [0090.520] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffae010880) returned 0x0 [0090.520] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd2c0dbd) returned 0x0 [0090.520] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0090.520] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0090.520] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0090.520] GetSystemMetrics (nIndex=42) returned 0 [0090.520] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:38") returned 4 [0090.520] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0090.520] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0090.521] GetCurrentObject (hdc=0xffffffffae010880, type=0x1) returned 0x1b00017 [0090.521] GetCurrentObject (hdc=0xffffffffae010880, type=0x2) returned 0x1900010 [0090.521] GetCurrentObject (hdc=0xffffffffae010880, type=0x7) returned 0x29050250 [0090.521] GetCurrentObject (hdc=0xffffffffae010880, type=0x6) returned 0x18a002e [0090.521] SaveDC (hdc=0xffffffffae010880) returned 1 [0090.521] GetNearestColor (hdc=0xffffffffae010880, color=0xffffff) returned 0xffffff [0090.521] RestoreDC (hdc=0xffffffffae010880, nSavedDC=-1) returned 1 [0090.521] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffae010880) returned 0x0 [0090.521] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0090.521] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0090.521] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0090.521] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0090.521] GetCurrentObject (hdc=0xffffffffae010880, type=0x1) returned 0x1b00017 [0090.521] GetCurrentObject (hdc=0xffffffffae010880, type=0x2) returned 0x1900010 [0090.521] GetCurrentObject (hdc=0xffffffffae010880, type=0x7) returned 0x29050250 [0090.521] GetCurrentObject (hdc=0xffffffffae010880, type=0x6) returned 0x18a002e [0090.521] SaveDC (hdc=0xffffffffae010880) returned 1 [0090.521] GetTextAlign (hdc=0xffffffffae010880) returned 0x0 [0090.521] GetTextColor (hdc=0xffffffffae010880) returned 0x0 [0090.521] SetTextColor (hdc=0xffffffffae010880, color=0xffffff) returned 0x0 [0090.521] GetCurrentObject (hdc=0xffffffffae010880, type=0x6) returned 0x18a002e [0090.522] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0090.522] SelectObject (hdc=0xffffffffae010880, h=0x200a0899) returned 0x18a002e [0090.522] GetBkMode (hdc=0xffffffffae010880) returned 2 [0090.522] SetBkMode (hdc=0xffffffffae010880, mode=1) returned 2 [0090.522] DrawTextExW (in: hdc=0xffffffffae010880, lpchText="4:38", cchText=4, lprc=0x14e1c8, format=0x0, lpdtp=0x2252a90 | out: lpchText="4:38", lprc=0x14e1c8) returned 20 [0090.522] RestoreDC (hdc=0xffffffffae010880, nSavedDC=-1) returned 1 [0090.522] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffae010880) returned 0x0 [0090.522] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0090.522] BitBlt (hdc=0x5010825, x=0, y=0, cx=40, cy=20, hdcSrc=0xffffffffae010880, x1=0, y1=0, rop=0xcc0020) returned 1 [0090.522] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffae010880) returned 0x0 [0090.522] SelectPalette (hdc=0x5010825, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0090.522] SelectObject (hdc=0xffffffffae010880, h=0x185000f) returned 0x29050250 [0090.522] DeleteDC (hdc=0xffffffffae010880) returned 1 [0090.522] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0090.522] EndPaint (hWnd=0x201da, lpPaint=0x14e448) returned 1 [0090.522] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0090.522] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0090.522] WaitMessage () returned 1 [0090.541] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0090.542] IsWindowUnicode (hWnd=0x201c8) returned 1 [0090.542] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0090.542] TranslateMessage (lpMsg=0x14edb0) returned 0 [0090.542] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0090.542] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0090.542] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0090.542] WaitMessage () returned 1 [0090.651] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0090.651] IsWindowUnicode (hWnd=0x201c8) returned 1 [0090.651] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0090.651] TranslateMessage (lpMsg=0x14edb0) returned 0 [0090.651] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0090.651] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0090.651] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0090.651] WaitMessage () returned 1 [0090.760] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0090.760] IsWindowUnicode (hWnd=0x201c8) returned 1 [0090.760] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0090.760] TranslateMessage (lpMsg=0x14edb0) returned 0 [0090.760] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0090.760] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0090.760] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0090.760] WaitMessage () returned 1 [0090.869] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0090.869] IsWindowUnicode (hWnd=0x201c8) returned 1 [0090.869] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0090.869] TranslateMessage (lpMsg=0x14edb0) returned 0 [0090.869] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0090.869] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0090.869] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0090.869] WaitMessage () returned 1 [0090.978] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0090.978] IsWindowUnicode (hWnd=0x201c8) returned 1 [0090.978] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0090.979] TranslateMessage (lpMsg=0x14edb0) returned 0 [0090.979] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0090.979] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0090.979] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0090.979] WaitMessage () returned 1 [0091.088] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0091.088] IsWindowUnicode (hWnd=0x201c8) returned 1 [0091.088] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0091.088] TranslateMessage (lpMsg=0x14edb0) returned 0 [0091.088] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0091.088] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0091.088] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0091.088] WaitMessage () returned 1 [0091.197] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0091.197] IsWindowUnicode (hWnd=0x201c8) returned 1 [0091.197] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0091.197] TranslateMessage (lpMsg=0x14edb0) returned 0 [0091.197] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0091.197] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0091.197] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0091.197] WaitMessage () returned 1 [0091.306] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0091.306] IsWindowUnicode (hWnd=0x201c8) returned 1 [0091.306] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0091.306] TranslateMessage (lpMsg=0x14edb0) returned 0 [0091.306] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0091.306] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0091.306] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0091.306] WaitMessage () returned 1 [0091.415] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0091.415] IsWindowUnicode (hWnd=0x201c8) returned 1 [0091.415] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0091.415] TranslateMessage (lpMsg=0x14edb0) returned 0 [0091.415] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0091.415] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0091.415] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0091.415] WaitMessage () returned 1 [0091.524] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0091.524] IsWindowUnicode (hWnd=0x301ee) returned 1 [0091.524] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0091.525] TranslateMessage (lpMsg=0x14edb0) returned 0 [0091.525] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0091.525] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0091.525] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0091.525] CoTaskMemFree (pv=0xa692f0) [0091.525] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0091.526] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0091.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0091.526] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0091.526] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0091.526] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e500) returned 1 [0091.526] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x274 [0091.526] GetFileType (hFile=0x274) returned 0x1 [0091.526] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e470) returned 1 [0091.526] GetFileType (hFile=0x274) returned 0x1 [0091.526] ReadFile (in: hFile=0x274, lpBuffer=0x2254820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x2254820*, lpNumberOfBytesRead=0x14e5d8*=0x2, lpOverlapped=0x0) returned 1 [0091.526] ReadFile (in: hFile=0x274, lpBuffer=0x2254820, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x2254820*, lpNumberOfBytesRead=0x14e5d8*=0x0, lpOverlapped=0x0) returned 1 [0091.526] CloseHandle (hObject=0x274) returned 1 [0091.527] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0091.527] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0091.527] CoTaskMemFree (pv=0xa692f0) [0091.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0091.527] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0091.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0091.528] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0091.528] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0091.528] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0091.528] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e4c0) returned 1 [0091.528] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x274 [0091.529] GetFileType (hFile=0x274) returned 0x1 [0091.529] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e430) returned 1 [0091.529] GetFileType (hFile=0x274) returned 0x1 [0091.529] WriteFile (in: hFile=0x274, lpBuffer=0x2257b70*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x14e508, lpOverlapped=0x0 | out: lpBuffer=0x2257b70*, lpNumberOfBytesWritten=0x14e508*=0x2, lpOverlapped=0x0) returned 1 [0091.529] CloseHandle (hObject=0x274) returned 1 [0091.561] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0091.561] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0091.561] GetSystemMetrics (nIndex=42) returned 0 [0091.561] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e600, nMaxCount=5 | out: lpString="4:38") returned 4 [0091.561] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e600) returned 0x4 [0091.561] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0091.561] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0091.561] GetSystemMetrics (nIndex=42) returned 0 [0091.561] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e5a0, nMaxCount=5 | out: lpString="4:38") returned 4 [0091.561] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e5a0) returned 0x4 [0091.562] SetWindowTextW (hWnd=0x201da, lpString="4:37") returned 1 [0091.562] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xc, wParam=0x0, lParam=0x2255894) returned 0x1 [0091.562] GetStockObject (i=5) returned 0x1900015 [0091.562] GetDlgItem (hDlg=0x401fa, nIDDlgItem=131546) returned 0x201da [0091.562] SendMessageW (hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0091.562] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0091.562] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0091.562] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0091.562] GetSystemMetrics (nIndex=42) returned 0 [0091.562] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e460, nMaxCount=5 | out: lpString="4:37") returned 4 [0091.562] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e460) returned 0x4 [0091.563] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0091.563] AdjustWindowRectEx (in: lpRect=0x14e478, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e478) returned 1 [0091.563] DrawTextExW (in: hdc=0x8010893, lpchText="4:37", cchText=4, lprc=0x14e3e8, format=0x2400, lpdtp=0x2258e28 | out: lpchText="4:37", lprc=0x14e3e8) returned 20 [0091.563] InvalidateRect (hWnd=0x201da, lpRect=0x0, bErase=1) returned 1 [0091.563] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0091.563] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0091.563] GetSystemMetrics (nIndex=42) returned 0 [0091.563] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14e3d0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0091.563] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14e3d0) returned 0xc [0091.563] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0091.563] IsWindowUnicode (hWnd=0x201da) returned 1 [0091.563] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0091.563] TranslateMessage (lpMsg=0x14edb0) returned 0 [0091.563] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0091.563] BeginPaint (in: hWnd=0x201da, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0x5010825 [0091.564] SelectPalette (hdc=0x5010825, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0091.564] CreateCompatibleDC (hdc=0x5010825) returned 0xffffffffaf010880 [0091.564] SelectObject (hdc=0xffffffffaf010880, h=0x29050250) returned 0x185000f [0091.564] GdipCreateFromHDC (hdc=0xffffffffaf010880, graphics=0x14e428) returned 0x0 [0091.564] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0091.564] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=40, height=20, combineMode=0x0) returned 0x0 [0091.564] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0091.564] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0091.564] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14e4b8) returned 0x0 [0091.564] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0091.564] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0091.564] LocalFree (hMem=0xa931f0) returned 0x0 [0091.564] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0091.564] GdipCreateRegion (region=0x14e450) returned 0x0 [0091.564] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0091.564] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0091.564] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0091.564] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0091.565] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0091.565] GetSystemMetrics (nIndex=42) returned 0 [0091.565] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:37") returned 4 [0091.565] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0091.565] GetClientRect (in: hWnd=0x201da, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0091.565] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0091.565] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0091.565] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0091.565] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0091.565] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0091.565] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0091.565] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0091.565] LocalFree (hMem=0xa931f0) returned 0x0 [0091.565] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0091.565] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0091.565] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0091.565] LocalFree (hMem=0xa931f0) returned 0x0 [0091.565] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0091.565] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0091.565] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0091.565] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0091.565] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0091.566] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0091.566] GetCurrentObject (hdc=0xffffffffaf010880, type=0x1) returned 0x1b00017 [0091.566] GetCurrentObject (hdc=0xffffffffaf010880, type=0x2) returned 0x1900010 [0091.566] GetCurrentObject (hdc=0xffffffffaf010880, type=0x7) returned 0x29050250 [0091.566] GetCurrentObject (hdc=0xffffffffaf010880, type=0x6) returned 0x18a002e [0091.566] SaveDC (hdc=0xffffffffaf010880) returned 1 [0091.566] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfffffffff9040872 [0091.566] GetClipRgn (hdc=0xffffffffaf010880, hrgn=0xfffffffff9040872) returned 0 [0091.566] SelectClipRgn (hdc=0xffffffffaf010880, hrgn=0xffffffffd104086f) returned 2 [0091.566] DeleteObject (ho=0xfffffffff9040872) returned 1 [0091.566] DeleteObject (ho=0xffffffffd104086f) returned 1 [0091.566] OffsetViewportOrgEx (in: hdc=0xffffffffaf010880, x=0, y=0, lppt=0x2259528 | out: lppt=0x2259528) returned 1 [0091.566] GetNearestColor (hdc=0xffffffffaf010880, color=0xa0) returned 0xa0 [0091.566] CreateSolidBrush (color=0xa0) returned 0xffffffffad100860 [0091.566] FillRect (hDC=0xffffffffaf010880, lprc=0x14e1e8, hbr=0xffffffffad100860) returned 1 [0091.566] DeleteObject (ho=0xffffffffad100860) returned 1 [0091.566] RestoreDC (hdc=0xffffffffaf010880, nSavedDC=-1) returned 1 [0091.566] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffaf010880) returned 0x0 [0091.567] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd2a0dbd) returned 0x0 [0091.567] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0091.567] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0091.567] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0091.567] GetSystemMetrics (nIndex=42) returned 0 [0091.567] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:37") returned 4 [0091.567] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0091.567] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0091.567] GetCurrentObject (hdc=0xffffffffaf010880, type=0x1) returned 0x1b00017 [0091.567] GetCurrentObject (hdc=0xffffffffaf010880, type=0x2) returned 0x1900010 [0091.567] GetCurrentObject (hdc=0xffffffffaf010880, type=0x7) returned 0x29050250 [0091.567] GetCurrentObject (hdc=0xffffffffaf010880, type=0x6) returned 0x18a002e [0091.567] SaveDC (hdc=0xffffffffaf010880) returned 1 [0091.567] GetNearestColor (hdc=0xffffffffaf010880, color=0xffffff) returned 0xffffff [0091.567] RestoreDC (hdc=0xffffffffaf010880, nSavedDC=-1) returned 1 [0091.567] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffaf010880) returned 0x0 [0091.568] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0091.568] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0091.568] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0091.568] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0091.568] GetCurrentObject (hdc=0xffffffffaf010880, type=0x1) returned 0x1b00017 [0091.568] GetCurrentObject (hdc=0xffffffffaf010880, type=0x2) returned 0x1900010 [0091.568] GetCurrentObject (hdc=0xffffffffaf010880, type=0x7) returned 0x29050250 [0091.568] GetCurrentObject (hdc=0xffffffffaf010880, type=0x6) returned 0x18a002e [0091.568] SaveDC (hdc=0xffffffffaf010880) returned 1 [0091.568] GetTextAlign (hdc=0xffffffffaf010880) returned 0x0 [0091.568] GetTextColor (hdc=0xffffffffaf010880) returned 0x0 [0091.568] SetTextColor (hdc=0xffffffffaf010880, color=0xffffff) returned 0x0 [0091.568] GetCurrentObject (hdc=0xffffffffaf010880, type=0x6) returned 0x18a002e [0091.568] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0091.568] SelectObject (hdc=0xffffffffaf010880, h=0x200a0899) returned 0x18a002e [0091.568] GetBkMode (hdc=0xffffffffaf010880) returned 2 [0091.568] SetBkMode (hdc=0xffffffffaf010880, mode=1) returned 2 [0091.569] DrawTextExW (in: hdc=0xffffffffaf010880, lpchText="4:37", cchText=4, lprc=0x14e1c8, format=0x0, lpdtp=0x2259db8 | out: lpchText="4:37", lprc=0x14e1c8) returned 20 [0091.569] RestoreDC (hdc=0xffffffffaf010880, nSavedDC=-1) returned 1 [0091.569] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffaf010880) returned 0x0 [0091.569] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0091.569] BitBlt (hdc=0x5010825, x=0, y=0, cx=40, cy=20, hdcSrc=0xffffffffaf010880, x1=0, y1=0, rop=0xcc0020) returned 1 [0091.569] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffaf010880) returned 0x0 [0091.569] SelectPalette (hdc=0x5010825, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0091.569] SelectObject (hdc=0xffffffffaf010880, h=0x185000f) returned 0x29050250 [0091.569] DeleteDC (hdc=0xffffffffaf010880) returned 1 [0091.569] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0091.569] EndPaint (hWnd=0x201da, lpPaint=0x14e448) returned 1 [0091.569] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0091.569] IsWindowUnicode (hWnd=0x201c8) returned 1 [0091.569] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0091.569] TranslateMessage (lpMsg=0x14edb0) returned 0 [0091.569] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0091.570] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0091.570] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0091.570] WaitMessage () returned 1 [0091.649] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0091.649] IsWindowUnicode (hWnd=0x201c8) returned 1 [0091.649] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0091.649] TranslateMessage (lpMsg=0x14edb0) returned 0 [0091.649] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0091.649] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0091.649] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0091.649] WaitMessage () returned 1 [0091.759] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0091.759] IsWindowUnicode (hWnd=0x201c8) returned 1 [0091.759] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0091.759] TranslateMessage (lpMsg=0x14edb0) returned 0 [0091.759] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0091.759] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0091.759] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0091.759] WaitMessage () returned 1 [0091.868] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0091.868] IsWindowUnicode (hWnd=0x201c8) returned 1 [0091.868] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0091.868] TranslateMessage (lpMsg=0x14edb0) returned 0 [0091.868] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0091.868] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0091.868] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0091.868] WaitMessage () returned 1 [0091.977] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0091.977] IsWindowUnicode (hWnd=0x201c8) returned 1 [0091.977] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0091.977] TranslateMessage (lpMsg=0x14edb0) returned 0 [0091.977] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0091.977] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0091.977] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0091.977] WaitMessage () returned 1 [0092.086] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0092.086] IsWindowUnicode (hWnd=0x201c8) returned 1 [0092.086] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0092.086] TranslateMessage (lpMsg=0x14edb0) returned 0 [0092.086] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0092.086] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0092.086] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0092.086] WaitMessage () returned 1 [0092.195] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0092.195] IsWindowUnicode (hWnd=0x201c8) returned 1 [0092.195] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0092.196] TranslateMessage (lpMsg=0x14edb0) returned 0 [0092.196] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0092.196] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0092.196] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0092.196] WaitMessage () returned 1 [0092.304] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0092.305] IsWindowUnicode (hWnd=0x201c8) returned 1 [0092.305] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0092.305] TranslateMessage (lpMsg=0x14edb0) returned 0 [0092.305] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0092.305] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0092.305] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0092.305] WaitMessage () returned 1 [0092.414] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0092.414] IsWindowUnicode (hWnd=0x201c8) returned 1 [0092.414] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0092.414] TranslateMessage (lpMsg=0x14edb0) returned 0 [0092.414] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0092.414] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0092.414] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0092.414] WaitMessage () returned 1 [0092.523] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0092.523] IsWindowUnicode (hWnd=0x201c8) returned 1 [0092.523] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0092.523] TranslateMessage (lpMsg=0x14edb0) returned 0 [0092.523] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0092.523] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0092.523] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0092.523] WaitMessage () returned 1 [0092.554] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0092.554] IsWindowUnicode (hWnd=0x301ee) returned 1 [0092.554] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0092.554] TranslateMessage (lpMsg=0x14edb0) returned 0 [0092.554] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0092.555] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0092.555] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0092.555] CoTaskMemFree (pv=0xa692f0) [0092.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0092.555] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0092.555] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0092.555] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.555] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0092.556] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14e020, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0092.556] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e500) returned 1 [0092.556] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x274 [0092.556] GetFileType (hFile=0x274) returned 0x1 [0092.556] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e470) returned 1 [0092.556] GetFileType (hFile=0x274) returned 0x1 [0092.556] ReadFile (in: hFile=0x274, lpBuffer=0x225bb48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x225bb48*, lpNumberOfBytesRead=0x14e5d8*=0x2, lpOverlapped=0x0) returned 1 [0092.556] ReadFile (in: hFile=0x274, lpBuffer=0x225bb48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x14e5d8, lpOverlapped=0x0 | out: lpBuffer=0x225bb48*, lpNumberOfBytesRead=0x14e5d8*=0x0, lpOverlapped=0x0) returned 1 [0092.556] CloseHandle (hObject=0x274) returned 1 [0092.557] CoTaskMemAlloc (cb=0x20c) returned 0xa692f0 [0092.557] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0xa692f0 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming") returned 0x0 [0092.557] CoTaskMemFree (pv=0xa692f0) [0092.557] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x14e050, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpFilePart=0x0) returned 0x2d [0092.557] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", nBufferLength=0x105, lpBuffer=0x14e1a0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0", lpFilePart=0x0) returned 0x4d [0092.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e5e0) returned 1 [0092.557] GetFileAttributesExW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0"), fInfoLevelId=0x0, lpFileInformation=0x14e6c0 | out: lpFileInformation=0x14e6c0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe1d50480, ftCreationTime.dwHighDateTime=0x1d4f13d, ftLastAccessTime.dwLowDateTime=0xe2806780, ftLastAccessTime.dwHighDateTime=0x1d4f13d, ftLastWriteTime.dwLowDateTime=0xe2806780, ftLastWriteTime.dwHighDateTime=0x1d4f13d, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0092.557] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e5a0) returned 1 [0092.557] GetFullPathNameW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", nBufferLength=0x105, lpBuffer=0x14dfe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time", lpFilePart=0x0) returned 0x52 [0092.557] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x14e4c0) returned 1 [0092.557] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming\\SadComputer\\SadComputer\\1.0.0.0\\time" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\roaming\\sadcomputer\\sadcomputer\\1.0.0.0\\time"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x274 [0092.558] GetFileType (hFile=0x274) returned 0x1 [0092.558] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x14e430) returned 1 [0092.558] GetFileType (hFile=0x274) returned 0x1 [0092.558] WriteFile (in: hFile=0x274, lpBuffer=0x225ee98*, nNumberOfBytesToWrite=0x2, lpNumberOfBytesWritten=0x14e508, lpOverlapped=0x0 | out: lpBuffer=0x225ee98*, lpNumberOfBytesWritten=0x14e508*=0x2, lpOverlapped=0x0) returned 1 [0092.559] CloseHandle (hObject=0x274) returned 1 [0092.560] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0092.560] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0092.560] GetSystemMetrics (nIndex=42) returned 0 [0092.560] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e600, nMaxCount=5 | out: lpString="4:37") returned 4 [0092.560] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e600) returned 0x4 [0092.560] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0092.560] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0092.560] GetSystemMetrics (nIndex=42) returned 0 [0092.560] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e5a0, nMaxCount=5 | out: lpString="4:37") returned 4 [0092.560] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e5a0) returned 0x4 [0092.560] SetWindowTextW (hWnd=0x201da, lpString="4:36") returned 1 [0092.560] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xc, wParam=0x0, lParam=0x225cbbc) returned 0x1 [0092.560] GetStockObject (i=5) returned 0x1900015 [0092.560] GetDlgItem (hDlg=0x401fa, nIDDlgItem=131546) returned 0x201da [0092.560] SendMessageW (hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0092.560] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0x202b, wParam=0x201da, lParam=0x14de50) returned 0x0 [0092.560] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0092.560] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0092.560] GetSystemMetrics (nIndex=42) returned 0 [0092.560] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e460, nMaxCount=5 | out: lpString="4:36") returned 4 [0092.561] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e460) returned 0x4 [0092.561] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0092.561] AdjustWindowRectEx (in: lpRect=0x14e478, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e478) returned 1 [0092.561] DrawTextExW (in: hdc=0x8010893, lpchText="4:36", cchText=4, lprc=0x14e3e8, format=0x2400, lpdtp=0x2260128 | out: lpchText="4:36", lprc=0x14e3e8) returned 20 [0092.561] InvalidateRect (hWnd=0x201da, lpRect=0x0, bErase=1) returned 1 [0092.561] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0092.561] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0092.561] GetSystemMetrics (nIndex=42) returned 0 [0092.561] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14e3d0, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0092.561] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14e3d0) returned 0xc [0092.561] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0092.561] IsWindowUnicode (hWnd=0x201da) returned 1 [0092.561] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0092.561] TranslateMessage (lpMsg=0x14edb0) returned 0 [0092.561] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0092.561] BeginPaint (in: hWnd=0x201da, lpPaint=0x14e4a8 | out: lpPaint=0x14e4a8) returned 0x5010825 [0092.562] SelectPalette (hdc=0x5010825, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0092.562] CreateCompatibleDC (hdc=0x5010825) returned 0xffffffffb0010880 [0092.562] SelectObject (hdc=0xffffffffb0010880, h=0x29050250) returned 0x185000f [0092.562] GdipCreateFromHDC (hdc=0xffffffffb0010880, graphics=0x14e428) returned 0x0 [0092.562] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0092.562] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=40, height=20, combineMode=0x0) returned 0x0 [0092.562] GdipCreateMatrix (matrix=0x14e450) returned 0x0 [0092.562] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0092.562] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14e4b8) returned 0x0 [0092.562] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0092.562] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0092.562] LocalFree (hMem=0xa931f0) returned 0x0 [0092.562] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0092.562] GdipCreateRegion (region=0x14e450) returned 0x0 [0092.562] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0092.562] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e4b0) returned 0x0 [0092.562] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e550) returned 0x0 [0092.562] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0092.562] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0092.562] GetSystemMetrics (nIndex=42) returned 0 [0092.563] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:36") returned 4 [0092.563] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0092.563] GetClientRect (in: hWnd=0x201da, lpRect=0x14e4f8 | out: lpRect=0x14e4f8) returned 1 [0092.563] GdipCreateRegion (region=0x14e0e0) returned 0x0 [0092.563] GdipGetClip (graphics=0x1afd81d0, region=0x1ba31b90) returned 0x0 [0092.563] GdipCreateMatrix (matrix=0x14e0e0) returned 0x0 [0092.563] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0092.563] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14e148) returned 0x0 [0092.563] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0092.563] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0092.563] LocalFree (hMem=0xa931f0) returned 0x0 [0092.563] GdipCombineRegionRegion (region=0x1ba31b90, region2=0x1afd85a0, combineMode=0x1) returned 0x0 [0092.563] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0092.563] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0092.563] LocalFree (hMem=0xa931f0) returned 0x0 [0092.563] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0092.563] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e1b0) returned 0x0 [0092.563] GdipIsInfiniteRegion (region=0x1ba31b90, graphics=0x1afd81d0, result=0x14e170) returned 0x0 [0092.563] GdipGetRegionHRgn (region=0x1ba31b90, graphics=0x1afd81d0, hRgn=0x14e170) returned 0x0 [0092.563] GdipDeleteRegion (region=0x1ba31b90) returned 0x0 [0092.563] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e1b8) returned 0x0 [0092.563] GetCurrentObject (hdc=0xffffffffb0010880, type=0x1) returned 0x1b00017 [0092.563] GetCurrentObject (hdc=0xffffffffb0010880, type=0x2) returned 0x1900010 [0092.563] GetCurrentObject (hdc=0xffffffffb0010880, type=0x7) returned 0x29050250 [0092.563] GetCurrentObject (hdc=0xffffffffb0010880, type=0x6) returned 0x18a002e [0092.563] SaveDC (hdc=0xffffffffb0010880) returned 1 [0092.563] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffd204086f [0092.563] GetClipRgn (hdc=0xffffffffb0010880, hrgn=0xffffffffd204086f) returned 0 [0092.564] SelectClipRgn (hdc=0xffffffffb0010880, hrgn=0xfffffffffc040872) returned 2 [0092.564] DeleteObject (ho=0xffffffffd204086f) returned 1 [0092.564] DeleteObject (ho=0xfffffffffc040872) returned 1 [0092.564] OffsetViewportOrgEx (in: hdc=0xffffffffb0010880, x=0, y=0, lppt=0x2260828 | out: lppt=0x2260828) returned 1 [0092.564] GetNearestColor (hdc=0xffffffffb0010880, color=0xa0) returned 0xa0 [0092.564] CreateSolidBrush (color=0xa0) returned 0xffffffffae100860 [0092.564] FillRect (hDC=0xffffffffb0010880, lprc=0x14e1e8, hbr=0xffffffffae100860) returned 1 [0092.564] DeleteObject (ho=0xffffffffae100860) returned 1 [0092.564] RestoreDC (hdc=0xffffffffb0010880, nSavedDC=-1) returned 1 [0092.564] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffb0010880) returned 0x0 [0092.564] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd280dbd) returned 0x0 [0092.564] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0092.564] GetWindowTextLengthW (hWnd=0x201da) returned 4 [0092.564] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xe, wParam=0x0, lParam=0x0) returned 0x4 [0092.564] GetSystemMetrics (nIndex=42) returned 0 [0092.564] GetWindowTextW (in: hWnd=0x201da, lpString=0x14e350, nMaxCount=5 | out: lpString="4:36") returned 4 [0092.564] CallWindowProcW (lpPrevWndFunc=0x7fefba461b4, hWnd=0x201da, Msg=0xd, wParam=0x5, lParam=0x14e350) returned 0x4 [0092.564] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e348) returned 0x0 [0092.564] GetCurrentObject (hdc=0xffffffffb0010880, type=0x1) returned 0x1b00017 [0092.564] GetCurrentObject (hdc=0xffffffffb0010880, type=0x2) returned 0x1900010 [0092.564] GetCurrentObject (hdc=0xffffffffb0010880, type=0x7) returned 0x29050250 [0092.564] GetCurrentObject (hdc=0xffffffffb0010880, type=0x6) returned 0x18a002e [0092.564] SaveDC (hdc=0xffffffffb0010880) returned 1 [0092.565] GetNearestColor (hdc=0xffffffffb0010880, color=0xffffff) returned 0xffffff [0092.565] RestoreDC (hdc=0xffffffffb0010880, nSavedDC=-1) returned 1 [0092.565] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffb0010880) returned 0x0 [0092.565] GetModuleHandleW (lpModuleName="comctl32.dll") returned 0x7fefb9a0000 [0092.565] AdjustWindowRectEx (in: lpRect=0x14e1f8, dwStyle=0x5600000d, bMenu=0, dwExStyle=0x0 | out: lpRect=0x14e1f8) returned 1 [0092.565] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e258) returned 0x0 [0092.565] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e238) returned 0x0 [0092.565] GetCurrentObject (hdc=0xffffffffb0010880, type=0x1) returned 0x1b00017 [0092.565] GetCurrentObject (hdc=0xffffffffb0010880, type=0x2) returned 0x1900010 [0092.565] GetCurrentObject (hdc=0xffffffffb0010880, type=0x7) returned 0x29050250 [0092.565] GetCurrentObject (hdc=0xffffffffb0010880, type=0x6) returned 0x18a002e [0092.565] SaveDC (hdc=0xffffffffb0010880) returned 1 [0092.565] GetTextAlign (hdc=0xffffffffb0010880) returned 0x0 [0092.565] GetTextColor (hdc=0xffffffffb0010880) returned 0x0 [0092.565] SetTextColor (hdc=0xffffffffb0010880, color=0xffffff) returned 0x0 [0092.566] GetCurrentObject (hdc=0xffffffffb0010880, type=0x6) returned 0x18a002e [0092.566] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dd70 | out: pv=0x14dd70) returned 92 [0092.566] SelectObject (hdc=0xffffffffb0010880, h=0x200a0899) returned 0x18a002e [0092.566] GetBkMode (hdc=0xffffffffb0010880) returned 2 [0092.566] SetBkMode (hdc=0xffffffffb0010880, mode=1) returned 2 [0092.566] DrawTextExW (in: hdc=0xffffffffb0010880, lpchText="4:36", cchText=4, lprc=0x14e1c8, format=0x0, lpdtp=0x22610b8 | out: lpchText="4:36", lprc=0x14e1c8) returned 20 [0092.566] RestoreDC (hdc=0xffffffffb0010880, nSavedDC=-1) returned 1 [0092.566] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffb0010880) returned 0x0 [0092.566] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e468) returned 0x0 [0092.566] BitBlt (hdc=0x5010825, x=0, y=0, cx=40, cy=20, hdcSrc=0xffffffffb0010880, x1=0, y1=0, rop=0xcc0020) returned 1 [0092.566] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffb0010880) returned 0x0 [0092.566] SelectPalette (hdc=0x5010825, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0092.566] SelectObject (hdc=0xffffffffb0010880, h=0x185000f) returned 0x29050250 [0092.566] DeleteDC (hdc=0xffffffffb0010880) returned 1 [0092.566] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0092.566] EndPaint (hWnd=0x201da, lpPaint=0x14e448) returned 1 [0092.566] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0092.566] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0092.566] WaitMessage () returned 1 [0092.632] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0092.632] IsWindowUnicode (hWnd=0x201c8) returned 1 [0092.632] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0092.632] TranslateMessage (lpMsg=0x14edb0) returned 0 [0092.632] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0092.633] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0092.633] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0092.633] WaitMessage () returned 1 [0092.648] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0092.649] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x27b0328) returned 0x1 [0092.649] IsWindowUnicode (hWnd=0x1020c) returned 1 [0092.649] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0092.649] TranslateMessage (lpMsg=0x14edb0) returned 0 [0092.649] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0092.649] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0x2a3, wParam=0x0, lParam=0x0) returned 0x0 [0092.649] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0092.649] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x27b0328) returned 0x1 [0092.649] IsWindowUnicode (hWnd=0x1020c) returned 1 [0092.649] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0092.649] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x84, wParam=0x0, lParam=0x27b0328) returned 0x1 [0092.649] SetCursor (hCursor=0x10003) returned 0x10003 [0092.649] TranslateMessage (lpMsg=0x14edb0) returned 0 [0092.649] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0092.649] _TrackMouseEvent (in: lpEventTrack=0x214a8d0 | out: lpEventTrack=0x214a8d0) returned 1 [0092.650] SendMessageW (hWnd=0x1020c, Msg=0xc12f, wParam=0x0, lParam=0x0) returned 0x0 [0092.650] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0xc12f, wParam=0x0, lParam=0x0) returned 0x0 [0092.650] InvalidateRect (hWnd=0x1020c, lpRect=0x0, bErase=0) returned 1 [0092.650] GetKeyState (nVirtKey=1) returned 1 [0092.650] GetKeyState (nVirtKey=2) returned 0 [0092.650] GetKeyState (nVirtKey=4) returned 0 [0092.650] GetKeyState (nVirtKey=5) returned 0 [0092.650] GetKeyState (nVirtKey=6) returned 0 [0092.650] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0092.650] IsWindowUnicode (hWnd=0x1020c) returned 1 [0092.650] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0092.650] TranslateMessage (lpMsg=0x14edb0) returned 0 [0092.650] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0092.650] BeginPaint (in: hWnd=0x1020c, lpPaint=0x14e478 | out: lpPaint=0x14e478) returned 0x5010830 [0092.650] SelectPalette (hdc=0x5010830, hPal=0x1108086e, bForceBkgd=1) returned 0x188000b [0092.650] CreateCompatibleDC (hdc=0x5010830) returned 0xffffffffb1010880 [0092.650] SelectObject (hdc=0xffffffffb1010880, h=0x29050250) returned 0x185000f [0092.650] GdipCreateFromHDC (hdc=0xffffffffb1010880, graphics=0x14e3f8) returned 0x0 [0092.650] GdipTranslateWorldTransform (graphics=0x1afd81d0, dx=0x7feeffbdf12, dy=0x3f591d6ff43a, order=0x0) returned 0x0 [0092.651] GdipSetClipRectI (graphics=0x1afd81d0, x=0, y=0, width=408, height=23, combineMode=0x0) returned 0x0 [0092.651] GdipCreateMatrix (matrix=0x14e420) returned 0x0 [0092.651] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0092.651] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14e488) returned 0x0 [0092.651] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0092.651] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0092.651] LocalFree (hMem=0xa931f0) returned 0x0 [0092.651] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0092.651] GdipCreateRegion (region=0x14e420) returned 0x0 [0092.651] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0092.651] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14e480) returned 0x0 [0092.651] GdipSaveGraphics (graphics=0x1afd81d0, state=0x14e520) returned 0x0 [0092.651] GdipRestoreGraphics (graphics=0x1afd81d0, state=0xfffffffffd260dbd) returned 0x0 [0092.651] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0092.651] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e198) returned 0x0 [0092.651] GetCurrentObject (hdc=0xffffffffb1010880, type=0x1) returned 0x1b00017 [0092.651] GetCurrentObject (hdc=0xffffffffb1010880, type=0x2) returned 0x1900010 [0092.652] GetCurrentObject (hdc=0xffffffffb1010880, type=0x7) returned 0x29050250 [0092.652] GetCurrentObject (hdc=0xffffffffb1010880, type=0x6) returned 0x18a002e [0092.652] SaveDC (hdc=0xffffffffb1010880) returned 1 [0092.652] GetNearestColor (hdc=0xffffffffb1010880, color=0xa0) returned 0xa0 [0092.652] GetNearestColor (hdc=0xffffffffb1010880, color=0x35) returned 0x35 [0092.652] GetNearestColor (hdc=0xffffffffb1010880, color=0x0) returned 0x0 [0092.652] GetNearestColor (hdc=0xffffffffb1010880, color=0x4848e5) returned 0x4848e5 [0092.652] GetNearestColor (hdc=0xffffffffb1010880, color=0x0) returned 0x0 [0092.652] GetNearestColor (hdc=0xffffffffb1010880, color=0x5151ff) returned 0x5151ff [0092.652] GetNearestColor (hdc=0xffffffffb1010880, color=0x4848e5) returned 0x4848e5 [0092.652] GetNearestColor (hdc=0xffffffffb1010880, color=0xc0) returned 0xc0 [0092.652] GetNearestColor (hdc=0xffffffffb1010880, color=0x0) returned 0x0 [0092.652] RestoreDC (hdc=0xffffffffb1010880, nSavedDC=-1) returned 1 [0092.652] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffb1010880) returned 0x0 [0092.652] IsAppThemed () returned 0x1 [0092.653] GetThemeAppProperties () returned 0x3 [0092.653] GetThemeAppProperties () returned 0x3 [0092.653] IsAppThemed () returned 0x1 [0092.653] GetThemeAppProperties () returned 0x3 [0092.653] GetThemeAppProperties () returned 0x3 [0092.653] SelectObject (hdc=0x8010893, h=0x120a086d) returned 0x200a0899 [0092.653] DrawTextExW (in: hdc=0x8010893, lpchText="Check", cchText=5, lprc=0x14de08, format=0x2415, lpdtp=0x2261ca0 | out: lpchText="Check", lprc=0x14de08) returned 13 [0092.653] IsAppThemed () returned 0x1 [0092.653] GetThemeAppProperties () returned 0x3 [0092.653] GetThemeAppProperties () returned 0x3 [0092.653] IsAppThemed () returned 0x1 [0092.653] GetThemeAppProperties () returned 0x3 [0092.653] GetThemeAppProperties () returned 0x3 [0092.653] IsAppThemed () returned 0x1 [0092.653] GetThemeAppProperties () returned 0x3 [0092.653] GetThemeAppProperties () returned 0x3 [0092.653] IsAppThemed () returned 0x1 [0092.653] GetThemeAppProperties () returned 0x3 [0092.653] GetThemeAppProperties () returned 0x3 [0092.653] IsThemePartDefined () returned 0x1 [0092.653] IsAppThemed () returned 0x1 [0092.653] GetThemeAppProperties () returned 0x3 [0092.653] GetThemeAppProperties () returned 0x3 [0092.653] IsThemeBackgroundPartiallyTransparent () returned 0x1 [0092.653] IsAppThemed () returned 0x1 [0092.653] GetThemeAppProperties () returned 0x3 [0092.654] GetThemeAppProperties () returned 0x3 [0092.654] IsAppThemed () returned 0x1 [0092.654] GetThemeAppProperties () returned 0x3 [0092.654] GetThemeAppProperties () returned 0x3 [0092.654] IsThemePartDefined () returned 0x1 [0092.654] GdipCreateRegion (region=0x14df00) returned 0x0 [0092.654] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0092.654] GdipCreateMatrix (matrix=0x14df00) returned 0x0 [0092.654] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0092.654] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14df68) returned 0x0 [0092.654] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0092.654] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0092.654] LocalFree (hMem=0xa931f0) returned 0x0 [0092.654] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0092.654] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0092.654] LocalFree (hMem=0xa931f0) returned 0x0 [0092.654] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0092.654] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14dfd0) returned 0x0 [0092.654] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df90) returned 0x0 [0092.654] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df90) returned 0x0 [0092.655] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0092.655] GdipGetDC (graphics=0x1afd81d0, hdc=0x14dfd8) returned 0x0 [0092.655] GetCurrentObject (hdc=0xffffffffb1010880, type=0x1) returned 0x1b00017 [0092.655] GetCurrentObject (hdc=0xffffffffb1010880, type=0x2) returned 0x1900010 [0092.655] GetCurrentObject (hdc=0xffffffffb1010880, type=0x7) returned 0x29050250 [0092.655] GetCurrentObject (hdc=0xffffffffb1010880, type=0x6) returned 0x18a002e [0092.655] SaveDC (hdc=0xffffffffb1010880) returned 1 [0092.655] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xfffffffffd040872 [0092.655] GetClipRgn (hdc=0xffffffffb1010880, hrgn=0xfffffffffd040872) returned 0 [0092.655] SelectClipRgn (hdc=0xffffffffb1010880, hrgn=0xffffffffd504086f) returned 2 [0092.655] DeleteObject (ho=0xfffffffffd040872) returned 1 [0092.655] DeleteObject (ho=0xffffffffd504086f) returned 1 [0092.655] OffsetViewportOrgEx (in: hdc=0xffffffffb1010880, x=0, y=0, lppt=0x2262688 | out: lppt=0x2262688) returned 1 [0092.656] DrawThemeParentBackground () returned 0x0 [0092.656] GetWindowPlacement (in: hWnd=0x401fa, lpwndpl=0x14db88 | out: lpwndpl=0x14db88) returned 1 [0092.656] GetClientRect (in: hWnd=0x401fa, lpRect=0x14daa0 | out: lpRect=0x14daa0) returned 1 [0092.656] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0092.656] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0092.656] GetSystemMetrics (nIndex=42) returned 0 [0092.656] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d800, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0092.656] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d800) returned 0xc [0092.656] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d888 | out: lpRect=0x14d888) returned 1 [0092.656] GetCurrentObject (hdc=0xffffffffb1010880, type=0x1) returned 0x1b00017 [0092.656] GetCurrentObject (hdc=0xffffffffb1010880, type=0x2) returned 0x1900010 [0092.656] GetCurrentObject (hdc=0xffffffffb1010880, type=0x7) returned 0x29050250 [0092.656] GetCurrentObject (hdc=0xffffffffb1010880, type=0x6) returned 0x18a002e [0092.656] SaveDC (hdc=0xffffffffb1010880) returned 2 [0092.656] GetNearestColor (hdc=0xffffffffb1010880, color=0xa0) returned 0xa0 [0092.657] CreateSolidBrush (color=0xa0) returned 0xffffffffaf100860 [0092.657] FillRect (hDC=0xffffffffb1010880, lprc=0x14d578, hbr=0xffffffffaf100860) returned 1 [0092.657] DeleteObject (ho=0xffffffffaf100860) returned 1 [0092.657] RestoreDC (hdc=0xffffffffb1010880, nSavedDC=-1) returned 1 [0092.657] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0092.657] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0092.657] GetSystemMetrics (nIndex=42) returned 0 [0092.657] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0092.657] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0092.657] GetClientRect (in: hWnd=0x401fa, lpRect=0x14d7b8 | out: lpRect=0x14d7b8) returned 1 [0092.657] GetCurrentObject (hdc=0xffffffffb1010880, type=0x1) returned 0x1b00017 [0092.657] GetCurrentObject (hdc=0xffffffffb1010880, type=0x2) returned 0x1900010 [0092.657] GetCurrentObject (hdc=0xffffffffb1010880, type=0x7) returned 0x29050250 [0092.657] GetCurrentObject (hdc=0xffffffffb1010880, type=0x6) returned 0x18a002e [0092.657] SaveDC (hdc=0xffffffffb1010880) returned 2 [0092.658] GetNearestColor (hdc=0xffffffffb1010880, color=0xa0) returned 0xa0 [0092.658] CreateSolidBrush (color=0xa0) returned 0xffffffffb0100860 [0092.658] FillRect (hDC=0xffffffffb1010880, lprc=0x14d4a8, hbr=0xffffffffb0100860) returned 1 [0092.658] DeleteObject (ho=0xffffffffb0100860) returned 1 [0092.658] RestoreDC (hdc=0xffffffffb1010880, nSavedDC=-1) returned 1 [0092.658] GetWindowTextLengthW (hWnd=0x401fa) returned 12 [0092.658] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xe, wParam=0x0, lParam=0x0) returned 0xc [0092.658] GetSystemMetrics (nIndex=42) returned 0 [0092.658] GetWindowTextW (in: hWnd=0x401fa, lpString=0x14d730, nMaxCount=13 | out: lpString="Sad Computer") returned 12 [0092.658] CallWindowProcW (lpPrevWndFunc=0x76f7b0ac, hWnd=0x401fa, Msg=0xd, wParam=0xd, lParam=0x14d730) returned 0xc [0092.658] RestoreDC (hdc=0xffffffffb1010880, nSavedDC=-1) returned 1 [0092.658] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffb1010880) returned 0x0 [0092.658] IsAppThemed () returned 0x1 [0092.658] GetThemeAppProperties () returned 0x3 [0092.658] GetThemeAppProperties () returned 0x3 [0092.658] IsAppThemed () returned 0x1 [0092.658] GetThemeAppProperties () returned 0x3 [0092.658] GetThemeAppProperties () returned 0x3 [0092.658] IsThemePartDefined () returned 0x1 [0092.658] GdipCreateRegion (region=0x14dea0) returned 0x0 [0092.658] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0092.658] GdipCreateMatrix (matrix=0x14dea0) returned 0x0 [0092.659] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba30ab0) returned 0x0 [0092.659] GdipIsMatrixIdentity (matrix=0x1ba30ab0, result=0x14df08) returned 0x0 [0092.659] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0092.659] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0092.659] LocalFree (hMem=0xa931f0) returned 0x0 [0092.659] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0092.659] GdipGetMatrixElements (matrix=0x1ba30ab0, matrixOut=0xa931f0) returned 0x0 [0092.659] LocalFree (hMem=0xa931f0) returned 0x0 [0092.659] GdipDeleteMatrix (matrix=0x1ba30ab0) returned 0x0 [0092.659] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df70) returned 0x0 [0092.659] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df30) returned 0x0 [0092.659] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df30) returned 0x0 [0092.659] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0092.659] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df78) returned 0x0 [0092.659] GetCurrentObject (hdc=0xffffffffb1010880, type=0x1) returned 0x1b00017 [0092.659] GetCurrentObject (hdc=0xffffffffb1010880, type=0x2) returned 0x1900010 [0092.659] GetCurrentObject (hdc=0xffffffffb1010880, type=0x7) returned 0x29050250 [0092.659] GetCurrentObject (hdc=0xffffffffb1010880, type=0x6) returned 0x18a002e [0092.659] SaveDC (hdc=0xffffffffb1010880) returned 1 [0092.659] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0xffffffffd604086f [0092.660] GetClipRgn (hdc=0xffffffffb1010880, hrgn=0xffffffffd604086f) returned 0 [0092.660] SelectClipRgn (hdc=0xffffffffb1010880, hrgn=0xffffffffff040872) returned 2 [0092.660] DeleteObject (ho=0xffffffffd604086f) returned 1 [0092.660] DeleteObject (ho=0xffffffffff040872) returned 1 [0092.660] OffsetViewportOrgEx (in: hdc=0xffffffffb1010880, x=0, y=0, lppt=0x2263490 | out: lppt=0x2263490) returned 1 [0092.660] IsAppThemed () returned 0x1 [0092.660] GetThemeAppProperties () returned 0x3 [0092.660] GetThemeAppProperties () returned 0x3 [0092.660] DrawThemeBackground () returned 0x0 [0092.660] RestoreDC (hdc=0xffffffffb1010880, nSavedDC=-1) returned 1 [0092.660] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffb1010880) returned 0x0 [0092.660] GdipCreateRegion (region=0x14de90) returned 0x0 [0092.660] GdipGetClip (graphics=0x1afd81d0, region=0x1afd85a0) returned 0x0 [0092.660] GdipCreateMatrix (matrix=0x14de90) returned 0x0 [0092.660] GdipGetWorldTransform (graphics=0x1afd81d0, matrix=0x1ba309b0) returned 0x0 [0092.660] GdipIsMatrixIdentity (matrix=0x1ba309b0, result=0x14def8) returned 0x0 [0092.660] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0092.660] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0092.660] LocalFree (hMem=0xa931f0) returned 0x0 [0092.660] LocalAlloc (uFlags=0x0, uBytes=0x30) returned 0xa931f0 [0092.660] GdipGetMatrixElements (matrix=0x1ba309b0, matrixOut=0xa931f0) returned 0x0 [0092.661] LocalFree (hMem=0xa931f0) returned 0x0 [0092.661] GdipDeleteMatrix (matrix=0x1ba309b0) returned 0x0 [0092.661] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df60) returned 0x0 [0092.661] GdipIsInfiniteRegion (region=0x1afd85a0, graphics=0x1afd81d0, result=0x14df20) returned 0x0 [0092.661] GdipGetRegionHRgn (region=0x1afd85a0, graphics=0x1afd81d0, hRgn=0x14df20) returned 0x0 [0092.661] GdipDeleteRegion (region=0x1afd85a0) returned 0x0 [0092.661] GdipGetDC (graphics=0x1afd81d0, hdc=0x14df68) returned 0x0 [0092.661] GetCurrentObject (hdc=0xffffffffb1010880, type=0x1) returned 0x1b00017 [0092.661] GetCurrentObject (hdc=0xffffffffb1010880, type=0x2) returned 0x1900010 [0092.661] GetCurrentObject (hdc=0xffffffffb1010880, type=0x7) returned 0x29050250 [0092.661] GetCurrentObject (hdc=0xffffffffb1010880, type=0x6) returned 0x18a002e [0092.661] SaveDC (hdc=0xffffffffb1010880) returned 1 [0092.661] CreateRectRgn (x1=0, y1=0, x2=0, y2=0) returned 0x40872 [0092.661] GetClipRgn (hdc=0xffffffffb1010880, hrgn=0x40872) returned 0 [0092.661] SelectClipRgn (hdc=0xffffffffb1010880, hrgn=0xffffffffd704086f) returned 2 [0092.661] DeleteObject (ho=0x40872) returned 1 [0092.661] DeleteObject (ho=0xffffffffd704086f) returned 1 [0092.662] OffsetViewportOrgEx (in: hdc=0xffffffffb1010880, x=0, y=0, lppt=0x2263968 | out: lppt=0x2263968) returned 1 [0092.662] IsAppThemed () returned 0x1 [0092.662] GetThemeAppProperties () returned 0x3 [0092.662] GetThemeAppProperties () returned 0x3 [0092.662] GetThemeBackgroundContentRect () returned 0x0 [0092.662] RestoreDC (hdc=0xffffffffb1010880, nSavedDC=-1) returned 1 [0092.662] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffb1010880) returned 0x0 [0092.662] IsAppThemed () returned 0x1 [0092.662] GetThemeAppProperties () returned 0x3 [0092.662] GetThemeAppProperties () returned 0x3 [0092.662] GdipGetTextRenderingHint (graphics=0x1afd81d0, mode=0x14e148) returned 0x0 [0092.662] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e128) returned 0x0 [0092.662] GetCurrentObject (hdc=0xffffffffb1010880, type=0x1) returned 0x1b00017 [0092.662] GetCurrentObject (hdc=0xffffffffb1010880, type=0x2) returned 0x1900010 [0092.662] GetCurrentObject (hdc=0xffffffffb1010880, type=0x7) returned 0x29050250 [0092.662] GetCurrentObject (hdc=0xffffffffb1010880, type=0x6) returned 0x18a002e [0092.662] SaveDC (hdc=0xffffffffb1010880) returned 1 [0092.662] GetTextAlign (hdc=0xffffffffb1010880) returned 0x0 [0092.662] GetTextColor (hdc=0xffffffffb1010880) returned 0x0 [0092.662] GetCurrentObject (hdc=0xffffffffb1010880, type=0x6) returned 0x18a002e [0092.662] GetObjectW (in: h=0x18a002e, c=92, pv=0x14dc60 | out: pv=0x14dc60) returned 92 [0092.663] SelectObject (hdc=0xffffffffb1010880, h=0x120a086d) returned 0x18a002e [0092.663] GetBkMode (hdc=0xffffffffb1010880) returned 2 [0092.663] SetBkMode (hdc=0xffffffffb1010880, mode=1) returned 2 [0092.663] DrawTextExW (in: hdc=0xffffffffb1010880, lpchText="Check", cchText=5, lprc=0x14dea0, format=0x2415, lpdtp=0x2263f48 | out: lpchText="Check", lprc=0x14dea0) returned 13 [0092.663] DrawTextExW (in: hdc=0xffffffffb1010880, lpchText="Check", cchText=5, lprc=0x14e0b8, format=0x2015, lpdtp=0x2263f48 | out: lpchText="Check", lprc=0x14e0b8) returned 13 [0092.663] RestoreDC (hdc=0xffffffffb1010880, nSavedDC=-1) returned 1 [0092.663] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffb1010880) returned 0x0 [0092.663] GetFocus () returned 0x1020c [0092.663] IsAppThemed () returned 0x1 [0092.663] GetThemeAppProperties () returned 0x3 [0092.663] GetThemeAppProperties () returned 0x3 [0092.663] GdipGetDC (graphics=0x1afd81d0, hdc=0x14e438) returned 0x0 [0092.663] BitBlt (hdc=0x5010830, x=0, y=0, cx=408, cy=23, hdcSrc=0xffffffffb1010880, x1=0, y1=0, rop=0xcc0020) returned 1 [0092.664] GdipReleaseDC (graphics=0x1afd81d0, hdc=0xffffffffb1010880) returned 0x0 [0092.664] SelectPalette (hdc=0x5010830, hPal=0x188000b, bForceBkgd=0) returned 0x1108086e [0092.664] SelectObject (hdc=0xffffffffb1010880, h=0x185000f) returned 0x29050250 [0092.664] DeleteDC (hdc=0xffffffffb1010880) returned 1 [0092.664] GdipDeleteGraphics (graphics=0x1afd81d0) returned 0x0 [0092.664] EndPaint (hWnd=0x1020c, lpPaint=0x14e418) returned 1 [0092.664] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0092.664] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0092.664] WaitMessage () returned 1 [0092.741] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0092.741] IsWindowUnicode (hWnd=0x201c8) returned 1 [0092.741] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0092.741] TranslateMessage (lpMsg=0x14edb0) returned 0 [0092.741] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0092.741] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0092.741] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0092.741] WaitMessage () returned 1 [0092.757] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0092.757] IsWindowUnicode (hWnd=0x1020c) returned 1 [0092.757] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0092.757] TranslateMessage (lpMsg=0x14edb0) returned 0 [0092.757] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0092.757] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 1 [0092.757] IsWindowUnicode (hWnd=0x1020c) returned 1 [0092.757] GetMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x14edb0) returned 1 [0092.757] TranslateMessage (lpMsg=0x14edb0) returned 0 [0092.757] DispatchMessageW (lpMsg=0x14edb0) returned 0x0 [0092.757] CallWindowProcW (lpPrevWndFunc=0x7fefba43b20, hWnd=0x1020c, Msg=0x2a1, wParam=0x0, lParam=0x400dd) returned 0x0 [0092.757] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0092.757] PeekMessageW (in: lpMsg=0x14edb0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x0 | out: lpMsg=0x14edb0) returned 0 [0092.757] WaitMessage () Thread: id = 2 os_tid = 0xa5c Thread: id = 3 os_tid = 0xa60 [0044.320] CoGetContextToken (in: pToken=0x1a83f7c0 | out: pToken=0x1a83f7c0) returned 0x800401f0 [0044.320] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 Thread: id = 4 os_tid = 0xa64 Thread: id = 5 os_tid = 0xa70 Thread: id = 6 os_tid = 0xbd8 Thread: id = 7 os_tid = 0xbdc